CVE-2020-9481

Name of the Vulnerable Software and Affected Versions Apache ATS versions 6.0.0 through 6.2.3 Apache ATS versions 7.0.0 through 7.1.9 Apache ATS versions 8.0.0 through 8.0.6

Description The issue is related to a HTTP/2 slow read attack and a reverse proxy and proxy redirection vulnerability in the Apache Traffic Server, which can lead to uncontrolled resource consumption. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations For versions 6.0.0 through 6.2.3, update to a version outside of this range to resolve the issue. For versions 7.0.0 through 7.1.9, update to a version outside of this range to resolve the issue. For versions 8.0.0 through 8.0.6, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the HTTP/2 protocol until a patch is available.