Apache Traffic Server: Invalid Range header causes a crash

CVE-2022-47185

What is CVE-2022-47185?

An improper input validation vulnerability exists in the range header of Apache Traffic Server, impacting versions through 9.2.1. This flaw could allow an attacker to craft malicious requests that exploit the input validation error, potentially leading to unintended behavior of the server. Organizations using Apache Traffic Server should investigate and apply appropriate mitigations to prevent exploitation.

References