CVE-2022-31778

Improper Input Validation vulnerability in handling the Transfer-Encoding header of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 8.0.0 to 9.0.2.

References

Affected packages

Git / github.com/apache/trafficserver

Affected ranges

Type

GIT

Repo

https://github.com/apache/trafficserver

Events

Introduced

b310e3566f58dd04ec2b15b111ec86ea70e20019

Last affected

965df952e1da3e5039473db8cf219cf9ef285a93

Introduced

b14030656330ed623cd1f9efe2f4f9abd9d16e29

Last affected

cb7eda60dc8c2068afd458fd20a8dd6232887f0d

Database specific

{
    "versions": [
        {
            "introduced": "8.0.0"
        },
        {
            "last_affected": "8.1.4"
        },
        {
            "introduced": "9.0.0"
        },
        {
            "last_affected": "9.1.2"
        }
    ]
}

Affected versions

8.*

8.0.0

8.0.0-rc4

8.0.1

8.0.1-rc0

8.0.2

8.0.2-rc0

8.0.3

8.0.3-rc0

8.0.4

8.0.4-rc0

8.0.5

8.0.6

8.0.6-rc0

8.0.6-rc1

8.1.0

8.1.0-rc0

8.1.1

8.1.1-rc0

8.1.2-rc0

8.1.3

8.1.3-rc0

8.1.3-rc1

8.1.4

8.1.4-rc0

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "11.0"
            }
        ]
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-31778.json"