CVE-2021-43082
heap-buffer-overflow with stats-over-http plugin
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 2.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
03 Nov 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0.
Affected products
Apache Software Foundation · Apache Traffic ServerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →