CVE-2018-8022

State: Published
Severity: Not scored
Published: Aug 29, 2018
Updated: Sep 16, 2024
Reserved: Mar 9, 2018

Description

A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Apache Traffic ServerApache Software Foundation	6.2.2Affected

References

[trafficserver-users] 20180828 [ANNOUNCE] Apache Traffic Server vulnerability with an invalid TLS handshake - CVE-2018-8022mailing-list
105183vdb-entry
https://github.com/apache/trafficserver/pull/2147

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.