Description

There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used.

Remediation

References

CVE-2017-5660

Related Vulnerabilities

OpenSSL Integer Overflow or Wraparound Vulnerability (CVE-2021-23840)

WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.34)

Claroline Other Vulnerability (CVE-2007-3517)

Osclass Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-6308)

Nginx CVE-2010-4180 Vulnerability (CVE-2010-4180)

Severity

High

Classification

CVE-2017-5660 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities