CVE-2022-32749
published 2022-12-19CVE-2022-32749: Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.30%
67.2th percentile
Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions.
This issue affects Apache Traffic Server: from 8.0.0 through 9.1.3.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | traffic_server | >= 8.0.0 < 8.1.6 | 8.1.6 |
| apache | traffic_server | >= 9.0.0 < 9.1.4 | 9.1.4 |
| apache_software_foundation | apache_traffic_server | 8.0.0 – 9.1.3 | — |
| debian | trafficserver | < trafficserver 9.1.4+ds-1 (bookworm) | trafficserver 9.1.4+ds-1 (bookworm) |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2022-32749: trafficserver - Improper Check for Unusual or Exceptional Conditions vulnerability handling requ...
vendor_debian·2022·CVSS 7.5
CVE-2022-32749 [HIGH] CVE-2022-32749: trafficserver - Improper Check for Unusual or Exceptional Conditions vulnerability handling requ...
Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions. This issue affects Apache Traffic Server: from 8.0.0 through 9.1.3.
Scope: local
bookworm: resolved (fixed in 9.1.4+ds-1)
bullseye: resolved (fixed in 8.1.6+ds-1~deb11u1)
sid: resolved (fixed in 9.1.4+ds-1)
OSV
CVE-2022-32749: Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server u
osv·2022-12-19·CVSS 7.5
CVE-2022-32749 [HIGH] CVE-2022-32749: Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server u
Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions. This issue affects Apache Traffic Server: from 8.0.0 through 9.1.3.
GHSA
GHSA-mgj6-q8hw-4xh2: Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server u
ghsa_unreviewed·2022-12-19
CVE-2022-32749 [HIGH] CWE-754 GHSA-mgj6-q8hw-4xh2: Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server u
Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions. This issue affects Apache Traffic Server: from 8.0.0 through 9.1.3.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-19
Published