Apache Traffic Control Traffic Router Regular Expression Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Apache Traffic Control's Traffic Router component, all versions. This issue arises from inefficient regular expression processing, allowing users with access to the management interface to introduce malicious patterns that can lead to unavailability. As Apache Traffic Control is a retired project, no fix will be released. Users are advised to seek alternatives or limit access to trusted individuals.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing unavailability of the affected Apache Traffic Control instance.