Uploaded image for project: 'Traffic Server'
  1. Traffic Server
  2. TS-1030

hash collation in hdrtoken_hash

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Critical
    • Resolution: Fixed
    • 3.1.2, 3.0.1
    • 3.1.2, 3.0.2
    • HTTP
    • None

    Description

      we have find out a 3 characters collation:
      SPX == PUT
      that will crash TS, we need to take more care of those hash, or bad guys may put some magic headers and crash all TS in your production, that is the most powerful DOS

      Attachments

        Activity

          People

            zwoop Leif Hedstrom
            zym Zhao Yongming
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: