imPC@ndo IT

Tracker / CVE-2021-43082

CVE-2021-43082

Critical 9.8

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0.

Affected products and versions

apache traffic_server · 8.0.0 → 8.1.2
apache traffic_server · 9.0.0 → 9.1.0

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References