Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-0256

Опубликовано: 26 мар. 2012
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:traffic_server:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.0.0:alpha:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.7:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.8:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:2.1.9:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:traffic_server:3.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 83%
0.01909
Низкий

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
почти 14 лет назад

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.

debian
почти 14 лет назад

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3. ...

github
почти 4 года назад

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.

EPSS

Процентиль: 83%
0.01909
Низкий

5 Medium

CVSS2

Дефекты

CWE-119