Description
The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service (out-of-bounds access and daemon crash) or possibly execute arbitrary code via vectors related to the (1) frame_handlers array or (2) set_dynamic_table_size function.
Remediation
References
Related Vulnerabilities
WordPress 3.7.x Prototype Pollution (3.7 - 3.7.37)
GlassFish CVE-2011-3559 Vulnerability (CVE-2011-3559)
Oracle Database Server CVE-2014-6544 Vulnerability (CVE-2014-6544)
PHP Resource Management Errors Vulnerability (CVE-2015-8877)
AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2023-26116)