Denial of Service Vulnerability in Apache Traffic Control's Traffic Router Component

CVE-2017-7670

What is CVE-2017-7670?

The Traffic Router component of Apache Traffic Control is susceptible to a Slowloris style Denial of Service attack. This vulnerability arises when TCP connections on the designated DNS port remain in an ESTABLISHED state until manually closed by the client or until a restart of the Traffic Router occurs. If connections persist and accumulate up to the limits set by the thread pool handling DNS requests, it may lead to the exhaustion of the pool. Consequentially, this leaves the Traffic Router incapable of processing any further DNS requests, regardless of the network transport protocol being used.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References