CVE-2018-8022

A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions.

Score

CVSS 3.0 7.5 High

Status

Modified - security@apache.org

Published

2018-08-29

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Traffic Server (Apache)
• Apache Traffic Server (Apache Software Foundation)

References

• http://www.securityfocus.com/bid/105183
• https://github.com/apache/trafficserver/pull/2147
• https://lists.apache.org/thread.html/ce404d2fe16cc59085ece5a6236ccd1549def471a2a9508198d966b1%40%3Cusers.trafficserver.…