CVE-2021-43082 heap-buffer-overflow with stats-over-http plugin

2021-11-0315:20:27

CWE-120

apache

www.cve.org

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

JSON

Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0.

CNA Affected

[
  {
    "product": "Apache Traffic Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "9.1.0"
      }
    ]
  }
]