Omkhar Arasaratnam

Apache Traffic Server: prefetch plugin can crash on attacker-influenced input

Apache Traffic Server: ts_lua plugin has initialization and resource-handling errors

Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash

Apache Traffic Server: HostDB SRV handling leaks memory

Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free

Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server

Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates

Apache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server

Apache Traffic Server: Out-of-bounds reads while parsing DNS responses

Apache Traffic Server: Listener and ACL handling allow access-control bypass