← back
CVE-2018-8022

CVE-2018-8022

EPSS 7.5%
A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions.
Affected products
Apache Software Foundation · Apache Traffic Server

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/apache/trafficserver/pull/2147https://lists.apache.org/thread.html/ce404d2fe16cc59085ece5a6236ccd1549def471a2a9508198d966b1%40%3Cusers.trafficserver.apache.org%3Ehttp://www.securityfocus.com/bid/105183