PT-2022-23969 · Apache · Apache Traffic Server

Menno De Gier

·

CVE-2022-37392

·

Published

2022-12-19

·

Updated

2023-04-06

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 9.1.2
Description The issue is related to an Improper Check for Unusual or Exceptional Conditions vulnerability in handling requests to Apache Traffic Server.
Recommendations For Apache Traffic Server versions 8.0.0 through 9.1.2, update to a version later than 9.1.2 to resolve the issue.

Exploit

Fix

DoS

Improper Check for Exceptional Conditions

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2022-37392
DLA-3385-1
DSA-5311-1
OESA-2022-2164
OESA-2022-2166

Affected Products

Apache Traffic Server