PT-2023-4530

CVE-2022-47185

·

Published

2023-08-09

·

Updated

2025-08-22

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions through 9.2.1
Description The issue is caused by improper input validation in the Range Header Handler component of the Apache Traffic Server. This can be exploited by a remote attacker to cause a denial of service.
Recommendations For versions through 9.2.1, update to a version later than 9.2.1 to resolve the issue. As a temporary workaround, consider restricting access to the Range Header Handler component until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
DLA-3595-1
DSA-5549-1
OESA-2025-2053
Found an issue in the description? Have something to add? Feel free to write us 👾