NetSight
high8.2

CVE-2024-35296

Invalid Accept-Encoding header can cause Apache Traffic Server to fail cache lookup and force forwarding requests.

Impact

Invalid Accept-Encoding header can cause Apache Traffic Server to fail cache lookup and force forwarding requests. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4. Users are recommended to upgrade to version 8.1.11 or 9.2.5, which fixes the issue.

Affected products

VendorProductAffected versions
ApacheTraffic Server
from 8.0.0 before 8.1.11
from 9.0.0 before 9.2.5

Weakness classification

References