Description

There is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the TLS handshake. This issue can cause the server to coredump.

Remediation

References

CVE-2017-7671

Related Vulnerabilities

WordPress Plugin job-portal Cross-Site Scripting (0.0.1)

Oracle JRE CVE-2020-2781 Vulnerability (CVE-2020-2781)

WordPress Plugin Quick Paypal Payments Security Bypass (5.7.21)

Drupal Core 4.7.x Arbitrary Code Execution (4.7.0)

WordPress Anti-CSRF Token Security Bypass Weakness (3.3.1)

Severity

High

Classification

CVE-2017-7671 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities