Apache Traffic Server Improper Input Validation Vulnerability (CVE-2018-8022)

Description

A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions.

Remediation

References

CVE-2018-8022

Related Vulnerabilities

WordPress Plugin Social Sharing-Kiwi Security Bypass (2.1.0)

Jenkins Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-21691)

PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5272)

WordPress Plugin Advanced Custom Fields (ACF) PHP Object Injection (6.0.7)

Liferay Portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-42122)

Severity

High

Classification

CVE-2018-8022 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H