CVE-2018-1318

State: Published
Severity: Not scored
Published: Aug 29, 2018
Updated: Sep 16, 2024
Reserved: Dec 7, 2017

Description

Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects versions Apache Traffic Server (ATS) 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Apache Traffic ServerApache Software Foundation	6.0.0 to 6.2.2Affected 7.0.0 to 7.1.3Affected

References

https://github.com/apache/trafficserver/pull/3195
105176vdb-entry
DSA-4282vendor-advisory
[trafficserver-users] 20180828 [ANNOUNCE] Apache Traffic Server vulnerability with method ACLs - CVE-2018-1318mailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.