Apache Software Foundation Traffic Server 7.0.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:traffic_server:7.0.0:*:*:*:*:*:*:*

part: a version: 7.0.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductTraffic Server (c0ff314f-21c5-5e35-91ea-c5f580192191)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/trafficserver purl2cpe 2026-06-01 10:14:32.811411
pkg:deb/debian/trafficserver purl2cpe 2026-06-01 10:14:32.811412
pkg:deb/ubuntu/trafficserver purl2cpe 2026-06-01 10:14:32.811413
pkg:github/alibaba/trafficserver purl2cpe 2026-06-01 10:14:32.811415
pkg:github/apache/trafficserver purl2cpe 2026-06-01 10:14:32.811416
pkg:maven/org.apache.trafficserver/trafficserver purl2cpe 2026-06-01 10:14:32.811418
pkg:rpm/opensuse/apache-trafficserver purl2cpe 2026-06-01 10:14:32.811419

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7671 vulnerable 2026-06-08 05:10:05.777111 Details available
There is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the TLS handshake. This issue can cause the server to coredump.
Published: 2018-02-27T20:00:00.000Z
Updated: 2024-09-16T22:09:57.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5660 vulnerable 2026-06-08 05:09:47.785229 Details available
There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used.
Published: 2018-02-27T20:00:00.000Z
Updated: 2024-09-17T00:37:13.932Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.