CVE-2018-8005

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-8005
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8005.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-8005
Downstream
Published
2018-08-29T13:29:01.997Z
Modified
2026-04-10T04:11:23.803199Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
[none]
Details

When there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the entire object from cache. This can cause performance problems with large objects in cache. This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x users should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.

References

Affected packages

Git / github.com/apache/trafficserver

Affected ranges

Type
GIT
Repo
https://github.com/apache/trafficserver
Events
Introduced
27f8e2cda9133864e6ffae0224c799fde5f10290
Last affected
0b7b630858b4983d077a63074776abdfa48778f8
Introduced
6c1c6cf20e7d0e287d697a0f4181436013d17c30
Last affected
e1b54b7d459c9df42ec511b93d7b3e51bd90f3f9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b14030656330ed623cd1f9efe2f4f9abd9d16e29
Database specific 
{
    "versions": [
        {
            "introduced": "6.0.0"
        },
        {
            "last_affected": "6.2.2"
        },
        {
            "introduced": "7.0.0"
        },
        {
            "last_affected": "7.1.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0"
        }
    ]
}

Affected versions

3.*
3.1.2
3.3.0
3.3.1
6.*
6.2.0
6.2.0-rc0
6.2.0-rc1
6.2.0-rc2
6.2.0-rc3
6.2.1
6.2.1-rc0
6.2.2
6.2.2-rc0
7.*
7.1.0
7.1.0-rc0
7.1.0-rc1
7.1.1
7.1.1-rc0
7.1.1-rc1
7.1.2
7.1.2-rc0
7.1.2-rc1
7.1.2-rc2
7.1.2-rc3
7.1.2-rc4
7.1.3
7.1.3-rc0
9.*
9.0.0
9.0.0-rc0
9.0.0-rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-8005.json"