Description

A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions.

Remediation

References

CVE-2018-8022

Related Vulnerabilities

TYPO3 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5101)

IBMHttpServer CVE-2010-0425 Vulnerability (CVE-2010-0425)

PHP Out-of-bounds Write Vulnerability (CVE-2016-5399)

TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-4321)

MySQL CVE-2024-21062 Vulnerability (CVE-2024-21062)

Severity

High

Classification

CVE-2018-8022 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities