CVE-2018-8004
- State
- Published
- Severity
- Not scored
- Published
- Aug 29, 2018
- Updated
- Sep 16, 2024
- Reserved
- Mar 9, 2018
Description
There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apache Traffic Server (ATS). This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Apache Traffic ServerApache Software Foundation |
|
References
- https://github.com/apache/trafficserver/pull/3201
- https://github.com/apache/trafficserver/pull/3251
- https://github.com/apache/trafficserver/pull/3192
- 105192vdb-entry
- DSA-4282vendor-advisory
- [trafficserver-users] 20180828 [ANNOUNCE] Apache Traffic Server vulnerability with multiple HTTP smuggling and cache poisoning attacks - CVE-2018-8004mailing-list
- https://github.com/apache/trafficserver/pull/3231
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.