PT-2018-18387 · Apache · Apache Traffic Server

CVE-2018-8022

Publicado

2018-08-29

Atualizado

2018-10-17

CVSS v3.1

7.5

Alta

Vetor

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server version 6.2.2

Description: A carefully crafted invalid TLS handshake can cause Apache Traffic Server to crash, resulting in a segfault.

Recommendations: For Apache Traffic Server version 6.2.2, upgrade to version 6.2.3 or later to resolve the issue.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2018-8022

Apache Traffic Server