CVE-2020-9494

Katalog CVE

CVSS 7.5 · High EPSS 3,6%

Kerentanan Allocation of Resources Without Limits or Throttling pada apache traffic server, debian linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADERS frames that can cause the server to allocate a large amount of memory and spin the thread.

Rincian

Terbit di NVD

24 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

3,6% peluang dieksploitasi; lebih tinggi dari 89,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://lists.apache.org/thread.html/rf7f86917f42fdaf904d99560cba0c016e03baea6244c47efeb60ecbe%40%3Cdev.traffi... mailing list · advisory vendor
• https://www.debian.org/security/2020/dsa-4710 advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/03/01/2 not applicable