CVE-2021-43082
CVE-2021-43082 · heap-buffer-overflow with stats-over-http plugin
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0.
CVSS 9.8 · Critical · EPSS 2.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
apache traffic server
- Versions
- 9.1.0: Affected
No fix published
trafficserver Debian:12
- Affected ranges
- ECOSYSTEM: < 9.1.1+ds-1
Update to 9.1.1+ds-1