CVE-2018-8022 A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later vers...
HighCVSS 7.5
EPSS 7.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/trafficserver(Debian:12) | < 7.0.0-1 | 7.0.0-1 |
| apache traffic server | >= 6.0.0, <= 6.2.2 | No fix listed |
| Apache Traffic Server | = 6.2.2 | No fix listed |
References
- Debian Security Tracker CVE-2018-8022 vendor-advisory
- 105183 third-party-advisory vdb-entry
- github.com patch third-party-advisory
- [trafficserver-users] 20180828 [ANNOUNCE] Apache Traffic Server vulnerability with an invalid TLS handshake - CVE-2018-8022 mailing-list