← All advisories

Medium severity6.3NVD Advisory· Published Mar 6, 2025· Updated Jun 17, 2026

CVE-2024-38311

CVE-2024-38311

Description

Improper Input Validation vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3.

Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue.

Affected products

3

Apache/trafficservercpe-rescue3 versions
8.0.0+ 2 more
- (no CPE)range: 8.0.0
- (no CPE)range: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3
- cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*range: >=9.0.0,<9.2.9

Patches

Vulnerability mechanics

References

1

lists.apache.org/thread/btofzws2yqskk2n7f01r3l1819x01023nvdMailing ListVendor Advisory

News mentions

0

No linked articles in our index yet.