CVE-2017-7670

CVE-2017-7670 describes a Slowloris-style DoS affecting the Traffic Router component of Apache Traffic Control. The vulnerability occurs because TCP connections on the configured DNS port can stay in the ESTABLISHED state indefinitely. If enough connections remain open, they exhaust the thread po...

Uncontrolled Resource Consumption

The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain in the ESTABLISHED state until the client explicitly closes the connection or Traffic Router is...