Description

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.

Remediation

References

CVE-2012-0256

Related Vulnerabilities

WordPress Plugin Gmedia Photo Gallery Cross-Site Scripting (0.9.3)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3732)

WordPress Plugin WP Web Scraper Unspecified Vulnerability (2.4)

MyBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-7305)

Oracle Application Server Other Vulnerability (CVE-2000-1235)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-119 CVE-2012-0256