Unrated

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11...

CVE-2020-17508 First seen on SecPulse Jan 11, 2021

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2020-17508 trafficserver Fixed in: 8.1.1+ds-1

Original description The description as published by the source.

The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. Apache Traffic Server versions 7.0.0 to 7.1.11 and 8.0.0 to 8.1.0 are affected.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory lists.apache.org

Key facts

Severity: Unrated
Published: Jan 11, 2021
First seen on SecPulse: Jan 11, 2021

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52