CVE-2021-44040

HTTP request line fuzzing attacks

EPSS 1.9%CWE-20

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1.

Produtos afetados

Apache Software Foundation · Apache Traffic Server

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://lists.apache.org/thread/zblwzcfs9ryhwjr89wz4osw55pxm6dx6 https://www.debian.org/security/2022/dsa-5153