Vulnerability in Apache Traffic_server

CVE-2014-3525

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks.

EPSS: 0.013 (79.9th percentile) — read the EPSS interpretation.

Affected products

Apache Traffic_server — versions 2.0.0, 2.0.1, 2.1.0
N/a — versions n/a

References

60375 (x_refsource_SECUNIA, third-party-advisory)
apache-traffic-cve20143525-unspecified(95495) (vdb-entry, x_refsource_XF)
[trafficserver-users] 20140723 [ANNOUNCE] Apache Traffic Server releases for security incident CVE-2014-3525 (mailing-list, x_refsource_MLIST)