CVE-2020-9494

Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADERS frames that can cause the server to…

published June 24, 2020

CVSS
—
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADERS frames that can cause the server to allocate a large amount of memory and spin the thread.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03580 · 89.4th percentile
Published
2020-06-24T15:25Z
EPSS history
Timeline
  • 24 JUN 15:25Z
    Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADERS frames that can cause the server to…
    cvelistv5