High severity7.5NVD Advisory· Published Feb 27, 2018· Updated Jun 17, 2026

CVE-2017-7671

Description

There is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the TLS handshake. This issue can cause the server to coredump.

Affected products

Apache/Traffic Servercpe-rescue
Range: 5.2.0 to 5.3.2

Patches

Vulnerability mechanics

References

www.debian.org/security/2018/dsa-4128nvdThird Party Advisory
lists.apache.org/thread.html/203bdcf9bbb718f3dc6f7aaf3e2af632474d51fa9e7bfb7832729905%40%3Cdev.trafficserver.apache.org%3Envd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000