PT-2018-8257

CVE-2017-5660

·

Published

2018-02-27

·

Updated

2018-03-21

Description by

CVSS 3.1
8.6
High
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions: Apache Traffic Server (ATS) versions 6.2.0 and prior Apache Traffic Server (ATS) versions 7.0.0 and prior
Description: The issue arises from the handling of the Host header and line folding, potentially causing problems when interacting with upstream proxies, leading to the wrong host being used.
Recommendations: For Apache Traffic Server (ATS) versions 6.2.0 and prior, update to a version that addresses the Host header and line folding issue. For Apache Traffic Server (ATS) versions 7.0.0 and prior, update to a version that addresses the Host header and line folding issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2017-5660
DSA-4128-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com