Apache Community

Apache Traffic Server: Memory-safety and limit-bypass errors across experimental plugins

Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash

Apache Traffic Server: txn_box plugin overflows the stack from attacker input

Apache Traffic Server: regex_remap plugin overflows the stack from attacker input

Apache Traffic Server: ESI plugin allows uncontrolled recursion and server-side request forgery

Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free

Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server

Apache Traffic Server: Out-of-bounds reads while parsing DNS responses

Apache Traffic Server: Listener and ACL handling allow access-control bypass

Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow