Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2018-8004
HistoryAug 29, 2018 - 12:00 a.m.

CVE-2018-8004

2018-08-2900:00:00
ubuntu.com
ubuntu.com
11

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.5%

JSON

There are multiple HTTP smuggling and cache poisoning issues when clients
making malicious requests interact with Apache Traffic Server (ATS). This
affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue
users running 6.x should upgrade to 6.2.3 or later versions and 7.x users
should upgrade to 7.1.4 or later versions.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchtrafficserver< anyUNKNOWN
ubuntu16.04noarchtrafficserver< anyUNKNOWN

Related

prion 1
cve 1
debiancve 1
osv 2
nessus 2
debian 1
openvas 2
hackerone 1
prion
prion
Design/Logic Flaw
2018-08-29 13:29:00
cve
cve
CVE-2018-8004
2018-08-29 13:29:00
debiancve
debiancve
CVE-2018-8004
2018-08-29 13:29:00
osv
osv
CVE-2018-8004
2018-08-29 13:29:01
trafficserver - security update
2018-08-31 00:00:00
nessus
nessus
Apache Traffic Server - HTTP Smuggling and Cache poisoning
2020-05-28 00:00:00
Debian DSA-4282-1 : trafficserver - security update
2018-09-04 00:00:00
debian
debian
[SECURITY] [DSA 4282-1] trafficserver security update
2018-08-31 21:51:26
openvas
openvas
Debian: Security Advisory (DSA-4282-1)
2018-08-30 00:00:00
Apache Traffic Server (ATS) Multiple Vulnerabilities (Aug 2018)
2018-08-30 00:00:00
hackerone
hackerone
Internet Bug Bounty: Multiple HTTP Smuggling reports
2019-07-17 22:47:10

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.5%

JSON
Related for UB:CVE-2018-8004
prion1cve1debiancve1osv2nessus2debian1openvas2hackerone1