一、漏洞信息

漏洞编号：[CVE-2024-50305](https://nvd.nist.gov/vuln/detail/CVE-2024-50305)

漏洞归属组件：[trafficserver](https://gitee.com/src-openeuler/trafficserver)

漏洞归属的版本：9.2.3

CVSS V3.0分值：

BaseScore：0.0 None

Vector：CVSS：3.0/

漏洞简述：

Valid Host header field can cause Apache Traffic Server to crash on some platforms.This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5.Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.

漏洞公开时间：2024-11-14 18:15:08

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-50305

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://lists.apache.org/thread/y15fh6c7kyqvzm0f9odw7c5jh4r4np0y | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(9.2.3):

2.openEuler-20.03-LTS-SP4(9.1.4):

3.openEuler-22.03-LTS-SP1:

4.openEuler-22.03-LTS-SP3:

5.openEuler-22.03-LTS-SP4:

6.openEuler-24.03-LTS(9.2.3):

7.openEuler-24.03-LTS-Next(9.2.3):

修复是否涉及abi变化(是/否)：

1.master(9.2.3):

2.openEuler-20.03-LTS-SP4(9.1.4):

3.openEuler-22.03-LTS-SP1:

4.openEuler-22.03-LTS-SP3:

5.openEuler-22.03-LTS-SP4:

6.openEuler-24.03-LTS(9.2.3):

7.openEuler-24.03-LTS-Next(9.2.3):

原因说明：

1.master(9.2.3):

2.openEuler-20.03-LTS-SP4(9.1.4):

3.openEuler-22.03-LTS-SP1:

4.openEuler-22.03-LTS-SP3:

5.openEuler-22.03-LTS-SP4:

6.openEuler-24.03-LTS(9.2.3):

7.openEuler-24.03-LTS-Next(9.2.3):

一、漏洞信息

漏洞编号：[CVE-2024-50305](https://nvd.nist.gov/vuln/detail/CVE-2024-50305)

漏洞归属组件：[trafficserver](https://gitee.com/src-openeuler/trafficserver)

漏洞归属的版本：9.2.3

CVSS V3.0分值：

漏洞简述：

Valid Host header field can cause Apache Traffic Server to crash on some platforms.This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5.Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.

漏洞公开时间：2024-11-14 18:15:08

漏洞创建时间：2024-11-14 18:42:33

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-50305

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://lists.apache.org/thread/y15fh6c7kyqvzm0f9odw7c5jh4r4np0y | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(9.2.3):

2.openEuler-20.03-LTS-SP4(9.1.4):

3.openEuler-22.03-LTS-SP1:

4.openEuler-22.03-LTS-SP3:

5.openEuler-22.03-LTS-SP4:

6.openEuler-24.03-LTS(9.2.3):

7.openEuler-24.03-LTS-Next(9.2.3):

修复是否涉及abi变化(是/否)：

1.master(9.2.3):

2.openEuler-20.03-LTS-SP4(9.1.4):

3.openEuler-22.03-LTS-SP1:

4.openEuler-22.03-LTS-SP3:

5.openEuler-22.03-LTS-SP4:

6.openEuler-24.03-LTS(9.2.3):

7.openEuler-24.03-LTS-Next(9.2.3):

原因说明：

1.master(9.2.3):

2.openEuler-20.03-LTS-SP4(9.1.4):

3.openEuler-22.03-LTS-SP1:

4.openEuler-22.03-LTS-SP3:

5.openEuler-22.03-LTS-SP4:

6.openEuler-24.03-LTS(9.2.3):

7.openEuler-24.03-LTS-Next(9.2.3):

一、漏洞信息

漏洞编号：[CVE-2024-50305](https://nvd.nist.gov/vuln/detail/CVE-2024-50305)

漏洞归属组件：[trafficserver](https://gitee.com/src-openeuler/trafficserver)

漏洞归属的版本：9.2.3

CVSS V3.0分值：

BaseScore：7.5 High

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

漏洞简述：

Valid Host header field can cause Apache Traffic Server to crash on some platforms.This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5.Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.

漏洞公开时间：2024-11-14 18:15:08

漏洞创建时间：2024-11-14 18:42:33

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-50305

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://lists.apache.org/thread/y15fh6c7kyqvzm0f9odw7c5jh4r4np0y | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

一、漏洞信息

漏洞编号：[CVE-2024-50305](https://nvd.nist.gov/vuln/detail/CVE-2024-50305)

漏洞归属组件：[trafficserver](https://gitee.com/src-openeuler/trafficserver)

漏洞归属的版本：9.2.3

CVSS V3.0分值：

BaseScore：7.5 High

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

漏洞简述：

Valid Host header field can cause Apache Traffic Server to crash on some platforms.This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5.Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.

漏洞公开时间：2024-11-14 18:15:08

漏洞创建时间：2024-11-14 18:42:33

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-50305

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://lists.apache.org/thread/y15fh6c7kyqvzm0f9odw7c5jh4r4np0y | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

Valid Host header field can cause Apache Traffic Server to crash on some platforms.This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5.Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.

openEuler评分：

7.5

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

受影响版本排查(受影响/不受影响)：

1.master(9.2.3):受影响

2.openEuler-20.03-LTS-SP4(9.1.4):受影响

3.openEuler-24.03-LTS(9.2.3):受影响

4.openEuler-24.03-LTS-Next(9.2.3):受影响

一、漏洞信息

漏洞编号：[CVE-2024-50305](https://nvd.nist.gov/vuln/detail/CVE-2024-50305)

漏洞归属组件：[trafficserver](https://gitee.com/src-openeuler/trafficserver)

CVSS V3.0分值：

BaseScore：7.5 High

Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

漏洞简述：

Valid Host header field can cause Apache Traffic Server to crash on some platforms.This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5.Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.

漏洞公开时间：2024-11-14 18:15:08

漏洞创建时间：2024-11-14 18:42:33

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-50305

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.apache.org | https://lists.apache.org/thread/y15fh6c7kyqvzm0f9odw7c5jh4r4np0y | |