CVE-2015-5206

Low

Low Medium High Critical

CVSS Score

Published: Sep 13, 2017

Last Modified: Apr 20, 2025

Vulnerability Description

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168.

Known Affected Software

2 configuration(s) from 1 vendor(s)

traffic_server

Version:

5.3.0

CPE:

cpe:2.3:a:apache:traffic_server:5.3.0:*:*:*:*:*:*:*

traffic_server

Version:

5.3.1

CPE:

cpe:2.3:a:apache:traffic_server:5.3.1:*:*:*:*:*:*:*

This vulnerability affects 2 software configuration(s). Ensure you patch all affected systems.

References & Resources

http://mail-archives.us.apache.org/mod_mbox/www-announce/201509.mbox/%3CCABF6JR2j5vesvnjbm6sDPB_zAGj3kNgzzHEpLUh6dWG6t8mC2w%40mail.gmail.com%3E
secalert@redhat.com
http://mail-archives.us.apache.org/mod_mbox/www-announce/201509.mbox/%3CCABF6JR2j5vesvnjbm6sDPB_zAGj3kNgzzHEpLUh6dWG6t8mC2w%40mail.gmail.com%3E
af854a3a-2127-422b-91ae-364da2661108

Severity Details

out of 10.0

Low

Weakness Type (CWE)

NVD-CWE-noinfo

View CWE Details on MITRE

Key Information

Published Date: September 13, 2017

External Resources

NIST NVD

National Vulnerability Database

MITRE CVE

Official CVE record

CVE Vulnerabilities

Posts & Pages