CVE-2018-1318

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects versions Apache Traffic Server (ATS) 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Apache Software FoundationApache Traffic Server6.0.0 to 6.2.2; 7.0.0 to 7.1.3

References

Timeline

Published
Aug 29, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-131807.5The mintToken function of a smart contract implementation for IMM Coin (IMC), an Ethereum token, has an integer overflow that allows the ownCVE-2018-131817.5The mintToken function of a smart contract implementation for Troo, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-131827.5The mintToken function of a smart contract implementation for loncoin (LON), an Ethereum token, has an integer overflow that allows the owneCVE-2018-131837.5The mintToken function of a smart contract implementation for JWC, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-131847.5The mintToken function of a smart contract implementation for TravelZedi Token (ZEDI), an Ethereum token, has an integer overflow that allowCVE-2018-131857.5The mintToken function of a smart contract implementation for appcoins (APPC), an Ethereum token, has an integer overflow that allows the owCVE-2018-131867.5The mintToken function of a smart contract implementation for MMTCoin (MMT), an Ethereum token, has an integer overflow that allows the owneCVE-2018-131877.5The mintToken function of a smart contract implementation for CIBN Live Token (CIBN LIVE), an Ethereum token, has an integer overflow that aCVE-2018-131887.5The mintToken function of a smart contract implementation for MyBO, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-131897.5The mint function of a smart contract implementation for Unolabo (UNLB), an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-13196.1In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If a victim goes to a maliciously crafted URL,CVE-2018-131907.5The mintToken function of a smart contract implementation for DVChain, an Ethereum token, has an integer overflow that allows the owner of t
CVE-2018-1318: High severity, CVSS 7.5 | Vulnix