Candidate: CVE-2015-5206 PublicDate: 2017-09-13 16:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5206 http://mail-archives.us.apache.org/mod_mbox/www-announce/201509.mbox/%3CCABF6JR2j5vesvnjbm6sDPB_zAGj3kNgzzHEpLUh6dWG6t8mC2w@mail.gmail.com%3E Description: Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL] Patches_trafficserver: upstream_trafficserver: released (6.0.0-1) precise/esm_trafficserver: DNE trusty_trafficserver: not-affected (code not present) trusty/esm_trafficserver: DNE (trusty was not-affected [code not present]) vivid/ubuntu-core_trafficserver: DNE xenial_trafficserver: ignored (end of standard support, was needed) zesty_trafficserver: ignored (reached end-of-life) artful_trafficserver: not-affected (7.0.0-5) bionic_trafficserver: not-affected (7.0.0-5) cosmic_trafficserver: not-affected (7.0.0-5) disco_trafficserver: not-affected (7.0.0-5) eoan_trafficserver: not-affected (7.0.0-5) focal_trafficserver: not-affected (7.0.0-5) groovy_trafficserver: not-affected (7.0.0-5) hirsute_trafficserver: not-affected (7.0.0-5) impish_trafficserver: not-affected (7.0.0-5) jammy_trafficserver: not-affected (7.0.0-5) devel_trafficserver: not-affected (7.0.0-5)