CVE-2022-32749

HIGH

Apache Traffic Server 8.0.0-9.1.3 - Denial of Service via Request Handling

Title source: llm

Description

Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions. This issue affects Apache Traffic Server: from 8.0.0 through 9.1.3.

References (1)

Core 1

Core References

Mailing List, Vendor Advisory vendor-advisory

https://lists.apache.org/thread/mrj2lg4s0hf027rk7gz8t7hbn9xpfg02

Scores

CVSS v3 7.5

EPSS 0.0655

EPSS Percentile 91.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-754

Status published

Products (1)

apache/traffic_server 8.0.0 - 8.1.6

Published Dec 19, 2022

Tracked Since Feb 18, 2026