p PatchFirst

CVE-2021-43082

CVE-2021-43082 · heap-buffer-overflow with stats-over-http plugin

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0.

CVSS 9.8 · Critical · EPSS 2.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

Original sources

Check your server →