PT-2015-3320
CVE-2015-5168
·
Publicado
2015-07-01
·
Atualizado
2017-09-21
Descrição por
CVSS 3.1
10
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Apache Traffic Server versions 5.3.x through 5.3.1
Description
The issue is related to the HTTP/2 experimental feature in Apache Traffic Server. It is caused by incorrect handling of HTTP/2 requests. Exploitation of this issue may allow a remote attacker to impact the confidentiality, integrity, and availability of data.
Recommendations
For Apache Traffic Server versions 5.3.x through 5.3.1, update to version 5.3.2 or later to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾