Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Apache Traffic Server < 4.2.1.1 / 5.0.1 DoS

High

Synopsis

The remote caching server contains a Denial-of-Service (DoS) attack vector.

Description

Apache Traffic Server versions prior to 4.2.1.1 / 5.0.1 are affected by an unspecified flaw in traffic_cop that is triggered as the program fails to restrict access to synthetic health checks, which may allow an attacker to cause a denial of service.

Solution

Upgrade to Apache Traffic Server 4.2.1.1 / 5.0.1 or later.