{"id":"CVE-2018-8022","state":"PUBLISHED","title":"A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to","description":"A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions.","publishedAt":"2018-08-29T13:00:00.000Z","updatedAt":"2024-09-16T21:57:30.534Z","severity":null,"assigner":"apache","products":["Apache Software Foundation Apache Traffic Server"],"affected":[{"vendor":"Apache Software Foundation","product":"Apache Traffic Server","versions":[{"version":"6.2.2","status":"affected"}]}],"references":["https://lists.apache.org/thread.html/ce404d2fe16cc59085ece5a6236ccd1549def471a2a9508198d966b1%40%3Cusers.trafficserver.apache.org%3E","http://www.securityfocus.com/bid/105183","https://github.com/apache/trafficserver/pull/2147"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:03.125Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/8xxx/CVE-2018-8022.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-8022","state":"PUBLISHED","datePublished":"2018-08-29T13:00:00.000Z","dateUpdated":"2024-09-16T21:57:30.534Z","assignerShortName":"apache","assignerOrgId":"f0158376-9dc2-43b6-827c-5f631a4d8d09","dateReserved":"2018-03-09T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions."}],"affected":[{"vendor":"Apache Software Foundation","product":"Apache Traffic Server","versions":[{"version":"6.2.2","status":"affected"}]}],"references":[{"url":"https://lists.apache.org/thread.html/ce404d2fe16cc59085ece5a6236ccd1549def471a2a9508198d966b1%40%3Cusers.trafficserver.apache.org%3E","name":"[trafficserver-users] 20180828 [ANNOUNCE] Apache Traffic Server vulnerability with an invalid TLS handshake - CVE-2018-8022","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.securityfocus.com/bid/105183","name":"105183","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://github.com/apache/trafficserver/pull/2147","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Information Disclosure","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"apache","dateUpdated":"2018-09-01T09:57:01.000Z","orgId":"f0158376-9dc2-43b6-827c-5f631a4d8d09"},"datePublic":"2018-08-28T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@apache.org","DATE_PUBLIC":"2018-08-28T00:00:00","ID":"CVE-2018-8022","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Apache Traffic Server","version":{"version_data":[{"version_value":"6.2.2"}]}}]},"vendor_name":"Apache Software Foundation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Information Disclosure"}]}]},"references":{"reference_data":[{"name":"[trafficserver-users] 20180828 [ANNOUNCE] Apache Traffic Server vulnerability with an invalid TLS handshake - CVE-2018-8022","refsource":"MLIST","url":"https://lists.apache.org/thread.html/ce404d2fe16cc59085ece5a6236ccd1549def471a2a9508198d966b1@%3Cusers.trafficserver.apache.org%3E"},{"name":"105183","refsource":"BID","url":"http://www.securityfocus.com/bid/105183"},{"name":"https://github.com/apache/trafficserver/pull/2147","refsource":"CONFIRM","url":"https://github.com/apache/trafficserver/pull/2147"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://lists.apache.org/thread.html/ce404d2fe16cc59085ece5a6236ccd1549def471a2a9508198d966b1%40%3Cusers.trafficserver.apache.org%3E","name":"[trafficserver-users] 20180828 [ANNOUNCE] Apache Traffic Server vulnerability with an invalid TLS handshake - CVE-2018-8022","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.securityfocus.com/bid/105183","name":"105183","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://github.com/apache/trafficserver/pull/2147","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T06:46:11.570Z"}}]}}}