Unrated severityNVD Advisory· Published Jan 11, 2021· Updated Aug 4, 2024

CVE-2020-17508

Description

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

Affected products

Apache Traffic Server/ATS ESI plugindescription
Apache/ATS ESI pluginllm-create
Range: 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0
Apache/Traffic Serverllm-fuzzy
Range: 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0

Patches

Vulnerability mechanics

References

lists.apache.org/thread.html/r65434f7acca3aebf81b0588587149c893fe9f8f9f159eaa7364a70ff%40%3Cannounce.trafficserver.apache.org%3Emitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000