CVE-2017-5660
N/A
Published: February 27, 2018 at 08:00 PM UTC
Updated: June 17, 2026 at 01:20 AM UTC
2 products affected across 2 vendorsDebian LinuxTraffic Server
Using Apache Traffic Server by Apache Software Foundation?
Get instant alerts when new vulnerabilities affect Apache Traffic Server - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (2)
Mailing Listx_refsource_MLIST
Source: [email protected]
https://lists.apache.org/thread.html/22d84783d94c53a5132ec89f002fe5165c87561a9428bcb6713b3c98%40%3Cdev.trafficserver.apache.org%3EVendor Advisoryx_refsource_DEBIANThird Party Advisory
Source: [email protected]
https://www.debian.org/security/2018/dsa-4128Quick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card