CVE-2016-5396

Опубликовано: 17 апр. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.

Ссылки

http://www.securityfocus.com/bid/97945
http://www.securitytracker.com/id/1038275
https://issues.apache.org/jira/browse/TS-5019
Issue Tracking
Patch
Third Party Advisory
http://www.securityfocus.com/bid/97945
http://www.securitytracker.com/id/1038275
https://issues.apache.org/jira/browse/TS-5019
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:traffic_server:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:traffic_server:6.1.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:traffic_server:6.1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:traffic_server:6.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01806

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2016-5396

CVSS3: 7.5

ubuntu

почти 9 лет назад

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.

CVE-2016-5396

CVSS3: 7.5

debian

почти 9 лет назад

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Att ...

GHSA-4r32-4xgr-6w96

CVSS3: 7.5

github

больше 3 лет назад

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.

EPSS

Процентиль: 82%

0.01806

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-399