ALPINE-CVE-2024-38479

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2024-38479
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2024-38479.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2024-38479
Upstream
Published
2024-11-14T10:15:05Z
Modified
2026-11-03T06:32:49Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

Improper Input Validation vulnerability in Apache Traffic Server.

This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5.

Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.

References

Affected packages

Alpine:v3.21 / trafficserver9

Package

Name
trafficserver9
Purl
pkg:apk/alpine/trafficserver9?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.2.6-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2024-38479.json"

Alpine:v3.22 / trafficserver9

Package

Name
trafficserver9
Purl
pkg:apk/alpine/trafficserver9?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.2.6-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2024-38479.json"

Alpine:v3.23 / trafficserver9

Package

Name
trafficserver9
Purl
pkg:apk/alpine/trafficserver9?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.2.6-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2024-38479.json"

Alpine:v3.24 / trafficserver9

Package

Name
trafficserver9
Purl
pkg:apk/alpine/trafficserver9?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.2.6-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2024-38479.json"