What’s Vulnerable › Vulnerabilities

CVE-2014-3525

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-08-22 · updated 2026-06-17

Description

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks.

Affected products

• Apache Software Foundation Apache Traffic Server: 2.0.0, 2.0.0-alpha, 2.0.1, 2.1.0, 2.1.1, 2.1.2 (+29)

References

• http://mail-archives.apache.org/mod_mbox/trafficserver-users/201407.mbox/%3CBFCEC9C8-1BE9-4DCA-AF9C-B8FE798EEC07%40yahoo-inc.com%3E
• http://secunia.com/advisories/60375
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95495
• http://mail-archives.apache.org/mod_mbox/trafficserver-users/201407.mbox/%3CBFCEC9C8-1BE9-4DCA-AF9C-B8FE798EEC07%40yahoo-inc.com%3E
• http://secunia.com/advisories/60375
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95495

Get alerted when CVE-2014-3525 or the next vulnerability affects your stack