Sploitus

32 exploited vulnerabilities in Apache Traffic Server

Vulnerabilities with publicly known exploits

Vendors
Apache, Debian, Linux Mint, Canonical, Alt Linux, Astra Linux
With known exploits
32
Affected Apache Traffic Server versions
< 9.2.6, 10.0.2, 8.1.7, 9.2.1, 8.1.11, 9.2.5, 9.2.11, 10.0.6, 8.1.10, 9.2.4, 9.2.13, 10.1.2, 9.2.10, 10.0.5, 8.1.9, 9.2.3, 8.1.6, 9.1.4, 8.1.4, 9.1.2, 8.1.5, 9.1.3, 10.0.4, 9.2.9
Affected Puma versions
≤ 4.3.8, 5.5.0

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2024-50306
CVSS 9.4 CRITICAL 2024-11-12FIX AVAILABLE
CVE-2023-33934
CVSS 9.4 CRITICAL 2023-08-09FIX AVAILABLE
CVE-2024-35161
CVSS 9.1 CRITICAL 2024-07-26FIX AVAILABLE
CVE-2024-35296
CVSS 8.2 HIGH 2024-07-25FIX AVAILABLE
CVE-2025-31698
CVSS 7.8 HIGH 2025-01-01FIX AVAILABLE
CVE-2024-38479
CVSS 7.8 HIGH 2024-11-12FIX AVAILABLE
CVE-2024-50305 1 exploit
CVSS 7.8 HIGH 2024-11-12FIX AVAILABLE
📄 Apache Traffic Server 9.2.5 Denial of Service
CVE-2024-31309 1 exploit
CVSS 7.8 HIGH 2024-01-05FIX AVAILABLE
Exploit for Allocation of Resources Without Limits or Throttling in Apache Http_Server
CVE-2022-47185
CVSS 7.8 HIGH 2023-08-09FIX AVAILABLE
CVE-2023-33933
CVSS 7.8 HIGH 2023-06-13FIX AVAILABLE
CVE-2023-30631
CVSS 7.8 HIGH 2023-06-13FIX AVAILABLE
CVE-2023-38522
CVSS 7.6 HIGH 2024-07-26FIX AVAILABLE
CVE-2025-65114
CVSS 7.5 HIGH 2026-04-02FIX AVAILABLE
CVE-2025-58136
CVSS 7.5 HIGH 2026-04-02FIX AVAILABLE
CVE-2025-49763
CVSS 7.5 HIGH 2025-01-01FIX AVAILABLE
CVE-2024-53868
CVSS 7.5 HIGH 2025-04-02FIX AVAILABLE
CVE-2023-41752
CVSS 7.5 HIGH 2023-10-17FIX AVAILABLE
CVE-2023-39456
CVSS 7.5 HIGH 2023-10-17FIX AVAILABLE
CVE-2022-47184
CVSS 7.5 HIGH 2023-06-13
CVE-2022-32749
CVSS 7.5 HIGH 2022-12-19FIX AVAILABLE
CVE-2022-31779
CVSS 7.5 HIGH 2022-08-10
CVE-2022-31778
CVSS 7.5 HIGH 2022-08-10
CVE-2022-28129
CVSS 7.5 HIGH 2022-08-10
CVE-2022-25763
CVSS 7.5 HIGH 2022-08-10
CVE-2022-31780
CVSS 7.5 HIGH 2022-08-10FIX AVAILABLE
CVE-2024-56196
CVSS 6.5 MEDIUM 2025-03-05FIX AVAILABLE
CVE-2024-56195
CVSS 6.5 MEDIUM 2025-03-05FIX AVAILABLE
CVE-2024-38311
CVSS 6.5 MEDIUM 2025-03-05FIX AVAILABLE
CVE-2022-40743
CVSS 6.1 MEDIUM 2022-12-19FIX AVAILABLE
CVE-2022-37392
CVSS 5.3 MEDIUM 2022-12-19FIX AVAILABLE
CVE-2024-56202
CVSS 4.3 MEDIUM 2025-03-05FIX AVAILABLE
CVE-2021-41136
CVSS 3.7 LOW 2012-02-17FIX AVAILABLE