VULNERABILITY INTELLIGENCE
CVE-2018-8022
CVSS score7.5 HIGH
EPSS probability7.50%
CISA KEVNot currently listed
Published2018-08-29
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- security@apache.org — Third Party Advisory, VDB Entry
- security@apache.org — Patch, Third Party Advisory
- security@apache.org
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108