← All advisories

Unrated severityNVD Advisory· Published Apr 27, 2020· Updated Aug 4, 2024

CVE-2020-9481

CVE-2020-9481

Description

Apache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read attack.

Affected products

2

Apache/ATSllm-create2 versions
>=6.0.0 <=6.2.3, >=7.0.0 <=7.1.9, >=8.0.0 <=8.0.6+ 1 more
- (no CPE)range: >=6.0.0 <=6.2.3, >=7.0.0 <=7.1.9, >=8.0.0 <=8.0.6
- (no CPE)range: 6.0.0 to 6.2.3

Patches

Vulnerability mechanics

References

2

www.debian.org/security/2020/dsa-4672mitrevendor-advisoryx_refsource_DEBIAN
lists.apache.org/thread.html/r21ddaf0a4a973f3c43c7ff399ae50d2f858f13f87bd6a9551c5cf6db%40%3Cannounce.trafficserver.apache.org%3Emitrex_refsource_CONFIRM

News mentions

0

No linked articles in our index yet.