CVE-2022-25763

概要

参考情報

• lists.apache.org/thread/rc64lwbdgrkv674koc3zl1sljr9vwg21 · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CJ67IWD5PRJUOIYIDJRUG3UMS2UF4X4J · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZCSBQBYPOZSWS5LCOAQ6LJLRLXFIAW5A · Mailing List
• debian.org/security/2022/dsa-5206 · Third Party Advisory

traffic server のその他の脆弱性

• CVE-2026-65100中 4.8Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure l…
• CVE-2026-58189高 7.5Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. This issue affects …
• CVE-2026-58188高 8.2Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors. This issue affects Apache Traffic Server: …
• CVE-2026-58187高 7.5The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. This issue a…
• CVE-2026-58186高 7.5The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses. This issue affects Apache …