PT-2018-18387 · Apache · Apache Traffic Server

CVE-2018-8022

Published

2018-08-29

Updated

2018-10-17

CVSS v3.1

7.5

High

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server version 6.2.2

Description: A carefully crafted invalid TLS handshake can cause Apache Traffic Server to crash, resulting in a segfault.

Recommendations: For Apache Traffic Server version 6.2.2, upgrade to version 6.2.3 or later to resolve the issue.

Fix

DoS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2018-8022

Apache Traffic Server