CVE-2020-17509

2021-01-1110:15:13

Google

osv.dev

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.4%

JSON

ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

CPENameOperatorVersion
trafficservereq8.0.1
trafficservereq8.0.3
trafficservereq8.0.2-rc0
trafficservereq8.0.4
trafficservereq8.0.6-rc0
trafficservereq8.0.6-rc1
trafficservereq8.0.7-rc0
trafficservereq8.0.3-rc0
trafficservereq8.0.0
trafficservereq8.0.1-rc0

Name	Operator	Version
trafficserver	eq	8.0.1
trafficserver	eq	8.0.3
trafficserver	eq	8.0.2-rc0
trafficserver	eq	8.0.4
trafficserver	eq	8.0.6-rc0
trafficserver	eq	8.0.6-rc1
trafficserver	eq	8.0.7-rc0
trafficserver	eq	8.0.3-rc0
trafficserver	eq	8.0.0
trafficserver	eq	8.0.1-rc0