CVE-2017-7671

There is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the TLS handshake. This issue can cause the server to coredump.

Score

CVSS 3.0 7.5 High

Status

Modified - security@apache.org

Published

2018-02-27

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Traffic Server (Apache)
• Apache Traffic Server (Apache Software Foundation)
• Debian Linux (Debian)

References

• https://lists.apache.org/thread.html/203bdcf9bbb718f3dc6f7aaf3e2af632474d51fa9e7bfb7832729905%40%3Cdev.trafficserver.ap…
• https://www.debian.org/security/2018/dsa-4128