CVE-2025-65114

Published Apr 2, 2026

Last updated 2 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-65114 is a denial-of-service (DoS) vulnerability affecting Apache Traffic Server, stemming from a flaw in how it handles malformed chunked messages during HTTP request processing. This vulnerability, classified under CWE-444 (Inconsistent Interpretation of HTTP Requests), enables request smuggling attacks. When Apache Traffic Server receives malformed chunked messages, it fails to properly validate and parse the chunk sizes and boundaries, leading to a discrepancy in how the proxy and backend servers interpret the HTTP requests. This flaw allows attackers to craft specially malformed chunked HTTP requests, potentially bypassing security controls, poisoning web caches, and gaining unauthorized access to sensitive data. The vulnerability impacts Apache Traffic Server versions 9.0.0 through 9.2.12 and 10.0.0 through 10.1.1.

Description: Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.12, from 10.0.0 through 10.1.1. Users are recommended to upgrade to version 9.2.13 or 10.1.2, which fix the issue.
Source: security@apache.org
NVD status: Analyzed
Products: traffic_server

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Severity: HIGH

Weaknesses

security@apache.org: CWE-444

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "361CCF7A-CB22-4074-A902-779476856482",
            "versionEndExcluding": "9.2.13",
            "versionStartIncluding": "9.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "CA23F0DC-E368-4327-87A1-A0DCD8553AFF",
            "versionEndExcluding": "10.1.2",
            "versionStartIncluding": "10.0.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.