CVE-2021-43082 heap-buffer-overflow with stats-over-http plugin

2021-11-0315:20:27

CWE-120

apache

www.cve.org

cve-2021-43082

apache traffic server

buffer overflow

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

69.4%

JSON

Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0.

CNA Affected

[
  {
    "product": "Apache Traffic Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "9.1.0"
      }
    ]
  }
]