CVE-2022-47185: 
Apache Traffic Server vulnerability analysis and mitigation

CVE-2022-47185 is an improper input validation vulnerability discovered in the range header of Apache Traffic Server (ATS). The vulnerability affects Apache Traffic Server versions through 9.2.1, including versions 8.0.0 to 8.1.7 and 9.0.0 to 9.2.1 (Security Online, NVD).

The vulnerability stems from improper input validation within the range header processing of Apache Traffic Server. It has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating network accessibility, low attack complexity, and no required privileges or user interaction (NVD).

The vulnerability could allow an attacker to cause a denial of service (DoS) condition by sending specifically crafted requests to the server. This could result in the system becoming unavailable, disrupting network traffic and services (Security Online).

Users are advised to upgrade to patched versions: for 8.x users, upgrade to version 8.1.8 or later, and for 9.x users, upgrade to version 9.2.2 or later. Various Linux distributions have also released security updates to address this vulnerability (Security Online, Debian Security).