CVE-2023-39456

概要

参考情報

• lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU
• lists.fedoraproject.org/archives/list/[email protected]/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3 · Mailing List
• debian.org/security/2023/dsa-5549

traffic server のその他の脆弱性

• CVE-2026-65100中 4.8Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure l…
• CVE-2026-58189高 7.5Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. This issue affects …
• CVE-2026-58188高 8.2Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors. This issue affects Apache Traffic Server: …
• CVE-2026-58187高 7.5The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. This issue a…
• CVE-2026-58186高 7.5The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses. This issue affects Apache …