Vulnerabilities > CVE-2022-32749 - Improper Check for Unusual or Exceptional Conditions vulnerability in Apache Traffic Server

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

apache

CWE-754

NVD

Published: 2022-12-19

Updated: 2023-11-07

Summary

Improper Check for Unusual or Exceptional Conditions vulnerability handling requests in Apache Traffic Server allows an attacker to crash the server under certain conditions. This issue affects Apache Traffic Server: from 8.0.0 through 9.1.3.

Vulnerable Configurations

Part	Description	Count
Application	Apache Apache Traffic Server 8.0.0 Apache Traffic Server 8.0.1 Apache Traffic Server 8.0.2 Apache Traffic Server 8.0.3 Apache Traffic Server 8.0.4 Apache Traffic Server 8.0.5 Apache Traffic Server 8.0.6 Apache Traffic Server 8.0.7 Apache Traffic Server 8.0.8 Apache Traffic Server 8.1.0 Apache Traffic Server 8.1.1 Apache Traffic Server 8.1.2 Apache Traffic Server 8.1.3 Apache Traffic Server 8.1.4 Apache Traffic Server 8.1.5 Apache Traffic Server 9.0.0 Apache Traffic Server 9.0.1 Apache Traffic Server 9.0.2 Apache Traffic Server 9.1.0 Apache Traffic Server 9.1.1 Apache Traffic Server 9.1.2 Apache Traffic Server 9.1.3	60

Common Weakness Enumeration (CWE)

CWE-754 - Improper Check for Unusual or Exceptional Conditions

References

https://lists.apache.org/thread/mrj2lg4s0hf027rk7gz8t7hbn9xpfg02