USN-7469-1

Details

It was discovered that Apache Traffic Server exhibited poor server resource management in its HTTP/2 protocol. An attacker could possibly use this issue to cause Apache Traffic Server to crash, resulting in a denial of service.

Affected Packages

trafficserver

Ubuntu Pro 20.04 LTS

Fixed in:

8.0.5+ds-3ubuntu0.1~esm1

trafficserver

Ubuntu Pro 22.04 LTS

Fixed in:

9.1.1+ds-2ubuntu0.1~esm1

References

REPORT

https://ubuntu.com/security/CVE-2023-44487

ADVISORY

https://ubuntu.com/security/notices/USN-7469-1