PT-2022-21442 · Apache · Apache Traffic Server

Vijay Mamidi

·

CVE-2022-32749

·

Published

2022-12-19

·

Updated

2023-04-06

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 9.1.3
Description An Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions.
Recommendations For Apache Traffic Server versions 8.0.0 through 9.1.3, update to a version later than 9.1.3 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.

Exploit

Fix

DoS

Improper Check for Exceptional Conditions

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2022-32749
DLA-3385-1
DSA-5311-1
OESA-2022-2164
OESA-2022-2166

Affected Products

Apache Traffic Server