PT-2017-8716 · Apache · Apache Traffic Server

Publicado 2017-04-17 · Atualizado 2017-07-11 · CVE-2016-5396

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 6.0.0 through 6.2.0

Description The issue is related to an HPACK Bomb Attack.

Recommendations For Apache Traffic Server versions 6.0.0 through 6.2.0, update to a version that is not affected by this issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-5396

Produtos afetados

Apache Traffic Server

Referências · 8

• https://osv.dev/vulnerability/CVE-2016-5396 · Aviso do Fabricante
• http://securityfocus.com/bid/97945 · Nota
• http://securitytracker.com/id/1038275 · Nota
• https://issues.apache.org/jira/browse/TS-5019 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2016-5396 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-5396 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5396 · Nota
• https://security-tracker.debian.org/tracker/CVE-2016-5396 · Aviso do Fabricante