CVE-2021-44040

CVE-2021-44040 affects Apache Traffic Server, with improper input validation in request line parsing allowing attackers to send invalid requests. Affected versions: 8.0.0–8.1.3 and 9.0.0–9.1.1. Severity is reflected as high in 3.1 metrics. Mitigation: remediation exists via vendor/debian advisori...

CVE-2021-44040

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1...

CVE-2021-44040 HTTP request line fuzzing attacks

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1...

Apache Traffic Server 授权问题漏洞

Apache Traffic Server ATS is a set of scalable HTTP proxy and caching servers from the Apache Foundation. versions 8.0.0 through 8.1.0 of Apache Traffic Server are vulnerable to an authorization issue that stems from incorrect authentication in the TLS source of the application. An attacker could...

CVE-2021-44759: Improper Authentication

Improper Authentication vulnerability in TLS origin validation of Apache Traffic Server allows an attacker to create a man in the middle attack. This issue affects Apache Traffic Server 8.0.0 to 8.1.0...

Apache Traffic Server 输入验证错误漏洞

Apache Traffic Server ATS is a set of scalable HTTP proxy and caching servers from the Apache Foundation in the U.S. An input validation error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.3 and 9.0.0 through 9.1.1, which stems from a request parsing incorrect input...

PT-2022-11974 · Apache · Apache Traffic Server

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 8.1.3 Apache Traffic Server versions 9.0.0 through 9.1.1 Description: The issue is related to improper input validation in request line parsing, allowing an attacker to send invalid requests...

CVE-2021-44040: Improper Input Validation

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1...

PT-2022-12225 · Apache · Apache Traffic Server

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 8.1.0 Description: The issue is related to an Improper Authentication vulnerability in the TLS origin validation of Apache Traffic Server, allowing an attacker to create a man-in-the-middle attack...

The vulnerability of the Apache Traffic Server web server arises from insufficient validation of input data, allowing attackers to trigger service interruptions.

The vulnerability of the Apache Traffic Server web server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the mechanism for verifying the authenticity of TLS connections on Apache Traffic Server allows a perpetrator to carry out a type of “man-in-the-middle” attack.

The vulnerability of the TLS authentication verification mechanism of the Apache Traffic Server web server is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a remote attacker to carry out a “man-in-the-middle” attack...

The vulnerability of the stats-over-http plugin in the Apache Traffic Server web server allows a hacker to cause a service failure.

The vulnerability of the stats-over-http plugin in the Apache Traffic Server web server is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow a malicious actor to cause service interruptions remotely...

Man-In-The-Middle Attack (MitM)

trafficserver is vulnerable to man in the middle attacks. The vulnerability exists due to an Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server...

Apache Traffic Server (ATS) 8.0.0 < 8.1.3, 9.0.0 < 9.1.1 Multiple Vulnerabilities

Apache Traffic Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:trafficserver"...

Apache Traffic Server Improper Input Validation Vulnerability (CNVD-2021-84824)

Apache Traffic Server, referred to as ATS or TS, is a high-performance, modular HTTP proxy and caching server.An improper input validation vulnerability exists in Apache Traffic Server version 5.0.0-9.1.0 when accepting socket connections. An attacker could exploit this vulnerability to cause the...

Apache Traffic Server Improper Input Validation Vulnerability (CNVD-2021-84821)

Apache Traffic Server, referred to as ATS or TS, is a high-performance, modular HTTP proxy and caching server. an improper input validation vulnerability exists in the header parsing in Apache Traffic Server versions 8.0.0-8.1.2, 9.0.0-9.0.1. An attacker could exploit this vulnerability to smuggl...

Apache Traffic Server Improper Input Validation Vulnerability (CNVD-2021-84822)

Apache Traffic Server, referred to as ATS or TS, is a high-performance, modular HTTP proxy and caching server. an improper input validation vulnerability exists in the header parsing in Apache Traffic Server versions 8.0.0-8.1.2, 9.0.0-9.1.0. An attacker could exploit this vulnerability to smuggl...

Apache Traffic Server Improper Input Validation Vulnerability

Apache Traffic Server, referred to as ATS or TS, is a high-performance, modular HTTP proxy and caching server. an improper input validation vulnerability exists in header parsing in Apache Traffic Server versions 8.0.0 - 8.1.2, 9.0.0 - 9.1.0. An attacker could exploit this vulnerability to smuggl...

Apache Traffic Server Heap Buffer Overflow Vulnerability

Apache Traffic Server, referred to as ATS or TS, is a high-performance, modular HTTP proxy and caching server. stats-over-http plugin in Apache Traffic Server version 9.1.0 is vulnerable to a heap buffer overflow. An attacker could exploit this vulnerability to overwrite memory...

DEBIAN-CVE-2021-43082

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0...