Lucene search
Ubuntu.comUB:CVE-2021-37150HistoryAug 10, 2022 - 12:00 a.m.
CVE-2021-37150
2022-08-1000:00:00
ubuntu.com
ubuntu.com
29
cve-2021-37150
input validation
apache traffic server
secure resources
unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.004
Percentile
72.9%
Improper Input Validation vulnerability in header parsing of Apache Traffic
Server allows an attacker to request secure resources. This issue affects
Apache Traffic Server 8.0.0 to 9.1.2.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | trafficserver | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | trafficserver | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | trafficserver | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | trafficserver | < any | UNKNOWN |
Related
osv
osv
CVE-2021-37150
2022-08-10 06:15:08
trafficserver - security update
2023-01-23 00:00:00
trafficserver - security update
2022-08-12 00:00:00
cnvd
cnvd
Apache Traffic Server Input Validation Error Vulnerability (CNVD-2023-03924)
2022-08-15 00:00:00
nvd
nvd
CVE-2021-37150
2022-08-10 06:15:08
cve
cve
CVE-2021-37150
2022-08-10 06:15:08
prion
prion
Input validation
2022-08-10 06:15:00
debiancve
debiancve
CVE-2021-37150
2022-08-10 06:15:08
cvelist
cvelist
CVE-2021-37150 Protocol vs scheme mismatch
2022-08-10 00:00:00
veracode
veracode
Information Disclosure
2022-08-20 14:15:34
openvas
openvas
Debian: Security Advisory (DLA-3279-1)
2023-01-24 00:00:00
Fedora: Security Advisory for trafficserver (FEDORA-2022-23043f5a0b)
2022-08-24 00:00:00
nessus
nessus
Debian DLA-3279-1 : trafficserver - LTS security update
2023-01-23 00:00:00
Debian DSA-5206-1 : trafficserver - security update
2022-08-13 00:00:00
debian
debian
[SECURITY] [DLA 3279-1] trafficserver security update
2023-01-23 11:09:56
[SECURITY] [DSA 5206-1] trafficserver security update
2022-08-12 15:05:18
fedora
fedora
[SECURITY] Fedora 35 Update: trafficserver-9.1.3-1.fc35
2022-08-20 01:30:52
[SECURITY] Fedora 36 Update: trafficserver-9.1.3-1.fc36
2022-08-20 01:47:08
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.004
Percentile
72.9%
Related for UB:CVE-2021-37150