{"id":"CVE-2017-5660","details":"There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used.","modified":"2026-07-08T05:50:26.551982955Z","published":"2018-02-27T20:29:00.403Z","database_specific":{"unresolved_ranges":[{"vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING"}]},"references":[{"type":"WEB","url":"https://lists.apache.org/thread.html/22d84783d94c53a5132ec89f002fe5165c87561a9428bcb6713b3c98%40%3Cdev.trafficserver.apache.org%3E"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4128"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/apache/trafficserver","events":[{"introduced":"0"},{"last_affected":"a57be23251358e6ac97442ebde3dae8d95d94846"},{"introduced":"6d6c6f2af903c3c2d1dec7db8094d00cb1813e60"},{"last_affected":"5a27a40000db0b8f8edee7e99cd65ecb710239b2"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"6.2.0"},{"introduced":"6.2.1"},{"last_affected":"6.2.1"},{"introduced":"6.2.1-rc0"},{"last_affected":"6.2.1-rc0"},{"introduced":"6.2.2"},{"last_affected":"6.2.2"},{"introduced":"6.2.2-rc0"},{"last_affected":"6.2.2-rc0"},{"introduced":"7.0.0"},{"last_affected":"7.0.0"},{"introduced":"7.0.0-rc0"},{"last_affected":"7.0.0-rc0"},{"introduced":"7.0.0-rc1"},{"last_affected":"7.0.0-rc1"},{"introduced":"7.0.0-rc2"},{"last_affected":"7.0.0-rc2"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","cpe:2.3:a:apache:traffic_server:6.2.1:*:*:*:*:*:*:*","cpe:2.3:a:apache:traffic_server:6.2.1:rc0:*:*:*:*:*:*","cpe:2.3:a:apache:traffic_server:6.2.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:traffic_server:6.2.2:rc0:*:*:*:*:*:*","cpe:2.3:a:apache:traffic_server:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:traffic_server:7.0.0:rc0:*:*:*:*:*:*","cpe:2.3:a:apache:traffic_server:7.0.0:rc1:*:*:*:*:*:*","cpe:2.3:a:apache:traffic_server:7.0.0:rc2:*:*:*:*:*:*"]}}],"versions":["6.2.1","6.2.2","7.0.0","7.0.0-rc0","7.0.0-rc1","7.0.0-rc2","6.2.0-rc3","6.2.0","6.2.0-rc2","6.2.0-rc1","6.2.0-rc0","3.3.1","3.3.0","3.1.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5660.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N"}]}