PT-2026-29793 · Apache · Apache Traffic Server

Katsutoshi Ikenoya · Publicado 2026-04-02 · Atualizado 2026-05-22 · CVE-2025-65114

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versões 9.0.0 através de 9.2.12 e 10.0.0 através de 10.1.1

Description O Apache Traffic Server é suscetível a request smuggling quando processa mensagens chunked malformadas. Isso pode levar a vários problemas de segurança.

Recommendations Atualize para a versão 9.2.13 ou 10.1.2.

Correção

HTTP Request/Response Smuggling

Enumeração de Fraquezas

CWE-444

Identificadores relacionados

CVE-2025-65114

OESA-2026-2383

OESA-2026-2385

Produtos afetados

Apache Traffic Server

Referências · 18

• https://lists.apache.org/thread/2s11roxlv1j8ph6q52rqo1klvl01n14q · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2025-65114 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-65114 · Aviso do Fabricante
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2385 · Nota
• https://osv.dev/vulnerability/OESA-2026-2383 · Aviso do Fabricante
• https://twitter.com/syedaquib77/status/2041125709213573352 · Publicação no Twitter
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-65114 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-58136 · Nota de Segurança
• https://twitter.com/syedaquib77/status/2041132540505776183 · Publicação no Twitter
• https://cve.org/CVERecord?id=CVE-2025-65114 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2025-65114 · Nota de Segurança
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2383 · Nota
• https://twitter.com/the_yellow_fall/status/2040085665568690476 · Publicação no Twitter
• https://twitter.com/syedaquib77/status/2041125706948653099 · Publicação no Twitter
• https://twitter.com/Cezar_H_Linux/status/2043440479568605603 · Publicação no Twitter