Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server. The configuration option proxy.config.http.push_method_enabled didn't function. However, by default the PUSH method is blocked in the ip_allow configuration file.This issue affects Apache Traffic Server: from 8.0.0 through 9.2.0.
8.x users should upgrade to 8.1.7 or later versions
9.x users should upgrade to 9.2.1 or later versions
References
| Link | Resource |
|---|---|
| https://lists.apache.org/thread/tns2b4khyyncgs5v5p9y35pobg9z2bvs | Mailing List Vendor Advisory |
| https://lists.debian.org/debian-lts-announce/2023/06/msg00037.html | Mailing List Third Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6GDCBNFDDW6ULW7CACJCPENI7BVDHM5O/ | Mailing List |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FGWXNAEEVRUZ5JG4EJAIIFC3CI7LFETV/ | Mailing List |
| https://www.debian.org/security/2023/dsa-5435 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
01 Feb 2024, 14:50
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fedoraproject fedora
Fedoraproject Debian Debian debian Linux |
|
| References | (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FGWXNAEEVRUZ5JG4EJAIIFC3CI7LFETV/ - Mailing List | |
| References | (MISC) https://lists.apache.org/thread/tns2b4khyyncgs5v5p9y35pobg9z2bvs - Mailing List, Vendor Advisory | |
| References | (MISC) https://www.debian.org/security/2023/dsa-5435 - Third Party Advisory | |
| References | (MISC) https://lists.debian.org/debian-lts-announce/2023/06/msg00037.html - Mailing List, Third Party Advisory | |
| References | (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6GDCBNFDDW6ULW7CACJCPENI7BVDHM5O/ - Mailing List | |
| CPE | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* |
30 Jun 2023, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 Jun 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
22 Jun 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CWE | CWE-20 |
21 Jun 2023, 21:05
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CPE | cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:* | |
| First Time |
Apache traffic Server
Apache |
|
| References | (MISC) https://lists.apache.org/thread/tns2b4khyyncgs5v5p9y35pobg9z2bvs - Mailing List |
14 Jun 2023, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-14 08:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-30631
Mitre link : CVE-2023-30631
CVE.ORG link : CVE-2023-30631
JSON object : View
Products Affected
apache
- traffic_server
debian
- debian_linux
fedoraproject
- fedora
CWE