← All advisories

Medium severity4.3NVD Advisory· Published Mar 6, 2025· Updated Jun 17, 2026

CVE-2024-56202

CVE-2024-56202

Description

Expected Behavior Violation vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3.

Users are recommended to upgrade to versions 9.2.9 or 10.0.4 or newer, which fixes the issue.

Affected products

3

Apache/trafficserver3 versions
cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*range: >=9.0.0,<9.2.9
- (no CPE)range: 9.0.0 - 9.2.8, 10.0.0 - 10.0.3
- (no CPE)range: 9.0.0

Patches

Vulnerability mechanics

References

1

lists.apache.org/thread/btofzws2yqskk2n7f01r3l1819x01023nvdMailing ListVendor Advisory

News mentions

0

No linked articles in our index yet.