CVE-2017-7671 in Traffic Server

Resumen

por MITRE

There is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the TLS handshake. This issue can cause the server to coredump.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 2017-04-11
• Divulgación: 2018-02-27
• Moderación: aceptado
• Artículo: VDB-113905
• CPE: listo
• CWE: CWE-20 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.04270
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-7671
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-7671
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-7671/