Apache Traffic Server Vulnerability Allows DoS Attacks Through Memory Exhaustion

Apache Traffic Server CVE-2025-49763 Memory Exhaustion Risk

A security flaw in Apache Traffic Server (ATS) is targeting cloud service providers worldwide. The vulnerability, identified as CVE-2025-49763, exposes affected systems to denial-of-service (DoS) attacks that exploit a critical ACL issue in the server’s Edge Side Includes (ESI) plugin, enabling attackers to exhaust server memory and disrupt operations.  Apache Traffic Server is widely used as a high-performance, scalable caching proxy and traffi…

Apache Traffic Server Vulnerability Allows DoS Attacks Through Memory Exhaustion

A newly disclosed vulnerability in Apache Traffic Server (ATS) has raised serious concerns among enterprise users and cloud providers, as attackers can exploit a flaw in the Edge Side Includes (ESI) plugin to trigger denial-of-service (DoS) attacks by exhausting server memory. The vulnerability, tracked as CVE-2025-49763, affects multiple versions of ATS and has prompted urgent […] The post Apache Traffic Server Vulnerability Allows DoS Attacks …