Detections
Analytics
Alpine: multiple trafficserver9 packages, perl-trafficserver9: security update to 9.2.6-r0
critical Tenable Cloud Security Plugin ID 427260
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic
Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version
9.2.6, which fixes the issue, or 10.0.2, which does not have the issue. (CVE-2024-38479)
- Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects
Apache Traffic Server: from 9.2.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which
fixes the issue, or 10.0.2, which does not have the issue. (CVE-2024-50305)
- Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects
Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to
upgrade to version 9.2.6 or 10.0.2, which fixes the issue. (CVE-2024-50306)
See Also
https://security.alpinelinux.org/vuln/CVE-2024-38479
Plugin Details
Severity: Critical
ID: 427260
Version: Revision 1.11
Type: Local
Published: 5/16/2025
Updated: 6/1/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.3
Percentile: 53.37
CVSS v2
Risk Factor: High
Base Score: 9.4
Temporal Score: 7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:C
CVSS Score Source: CVE-2024-50306
CVSS v3
Risk Factor: Critical
Base Score: 9.1
Temporal Score: 7.9
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 11/13/2024