VYPR
← All advisories
High severity7.5NVD Advisory· Published Feb 27, 2018· Updated Jun 17, 2026

CVE-2017-7671

CVE-2017-7671

Description

There is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the TLS handshake. This issue can cause the server to coredump.

Affected products

4
  • Apache/trafficservercpe-rescue3 versions
    5.2.0 to 5.3.2+ 2 more
    • (no CPE)range: 5.2.0 to 5.3.2
    • cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*range: >=5.2.0,<=5.3.2
    • cpe:2.3:a:apache:traffic_server:7.0.0:*:*:*:*:*:*:*
  • Debian/linux
    cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.