Servers and applications

CVE-2023-39456

Improper Input Validation vulnerability in Apache Traffic Server with malformed HTTP/2 frames.This issue affects Apache Traffic Server: from 9.0.0 through 9.2.2. Users are recommended to upgrade to version 9.2.3, which fixes the issue.

Severity: High 7.5
Published: 17 Oct 2023
Last changed: 17 Jun 2026
Added to UpHeron: 1 Nov 2026
Fixed in: 9.2.3
Sources: NVD

Affected software

Software	Affected versions
Apache Traffic ServerServers and applications · `cpe:a:apache:traffic_server`	From 9.0.0 before 9.2.3

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2023-39456
CVE.org https://www.cve.org/CVERecord?id=CVE-2023-39456