Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-17509

Опубликовано: 11 янв. 2021
Источник: ubuntu
Приоритет: low
CVSS2: 4.3
CVSS3: 7.5

Описание

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

DNE

esm-apps/bionic

needed

esm-apps/focal

needed

esm-apps/jammy

not-affected

8.1.1+ds-1
esm-apps/noble

not-affected

8.1.1+ds-1
esm-apps/xenial

needs-triage

esm-infra-legacy/trusty

DNE

focal

ignored

end of standard support, was needed
groovy

ignored

end of life

Показывать по

4.3 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
около 5 лет назад

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

CVSS3: 7.5
debian
около 5 лет назад

ATS negative cache option is vulnerable to a cache poisoning attack. I ...

github
больше 3 лет назад

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

CVSS3: 7.5
fstec
больше 5 лет назад

Уязвимость опции ATS negative cache веб-сервера Apache Traffic Server, связанная с недостатком в интерпретации HTTP-запросов, позволяющая нарушителю оказать воздействие на целостность данных

4.3 Medium

CVSS2

7.5 High

CVSS3