Home

CVE-2021-44040

Description

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
4.349

Associated Vulnerability

VulnerabilityOS Platform
trafficserver security update(DSA-5153-1) trafficserver_8.0.2+ds-1+deb10u6_i386.debLinux
trafficserver security update(DSA-5153-1) trafficserver_8.0.2+ds-1+deb10u6_amd64.debLinux
trafficserver security update(DSA-5153-1) trafficserver_8.1.1+ds-1.1+deb11u1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234