CVE-2017-7671
Fixed in a distro release EPSS 2%
There is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the TLS handshake. This issue can cause the server to coredump.
Products: Apache Software Foundation Apache Traffic Server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | trafficserver | 7.1.2+ds-1 |
| Debian 9 | trafficserver | 7.0.0-6+deb9u1 |
| Ubuntu 16.04 LTS | trafficserver | no fix |