Lucene search
K

14 matches found

SUSE CVE
SUSE CVE
added 2025/11/09 12:23 a.m.1 views

SUSE CVE-2025-61581

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

7.5CVSS6.9AI score0.00672EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/16 9:30 a.m.6 views

EUVD-2025-34739

Apache Traffic Control has an Inefficient Regular Expression Complexity vulnerability...

6.5AI score0.00672EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2025/10/16 9:30 a.m.6 views

Apache Traffic Control has an Inefficient Regular Expression Complexity vulnerability

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

7.5CVSS6.8AI score0.00672EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/10/16 9:30 a.m.2 views

GHSA-9M49-P2J3-C6XM Apache Traffic Control has an Inefficient Regular Expression Complexity vulnerability

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

5.3CVSS6.8AI score0.00672EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/16 8:40 a.m.7 views

CVE-2025-61581 Apache Traffic Control: ReDoS issue in Traffic Router configuration

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

0.00672EPSS
Exploits0References1
CVE
CVE
added 2025/10/16 8:40 a.m.15 views

CVE-2025-61581

CVE-2025-61581 describes an Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control affecting all versions. The description states that users with access to the Traffic Router management interface could supply malicious patterns, potentially causing unavailability. The p...

7.5CVSS6.5AI score0.00672EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/16 8:40 a.m.2 views

CVE-2025-61581 Apache Traffic Control: ReDoS issue in Traffic Router configuration

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

6.5AI score0.00672EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-3672

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.048EPSS
Exploits0References11
Prion
Prion
added 2017/07/10 6:29 p.m.17 views

Design/Logic Flaw

The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain in the ESTABLISHED state until the client explicitly closes the connection or Traffic Router is...

5CVSS7.5AI score0.048EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2017/07/10 6:29 p.m.25 views

CVE-2017-7670

The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain in the ESTABLISHED state until the client explicitly closes the connection or Traffic Router is...

7.5CVSS7.5AI score0.048EPSS
Exploits0References3
OSV
OSV
added 2017/07/10 6:29 p.m.13 views

CVE-2017-7670

The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain in the ESTABLISHED state until the client explicitly closes the connection or Traffic Router is...

7.5CVSS6.8AI score
Exploits0References3
Cvelist
Cvelist
added 2017/07/10 6:0 p.m.32 views

CVE-2017-7670

The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain in the ESTABLISHED state until the client explicitly closes the connection or Traffic Router is...

7.4AI score0.048EPSS
Exploits0References3
CVE
CVE
added 2017/07/10 6:0 p.m.84 views

CVE-2017-7670

CVE-2017-7670 describes a Slowloris-style DoS affecting the Traffic Router component of Apache Traffic Control. The vulnerability occurs because TCP connections on the configured DNS port can stay in the ESTABLISHED state indefinitely. If enough connections remain open, they exhaust the thread po...

7.5CVSS7.4AI score0.048EPSS
Exploits0References3Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2017/07/10 12:0 a.m.20 views

Uncontrolled Resource Consumption

The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain in the ESTABLISHED state until the client explicitly closes the connection or Traffic Router is...

7.5CVSS1.9AI score0.048EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder