CVE-2021-43082

Name of the Vulnerable Software and Affected Versions Apache Traffic Server version 9.1.0

Description The issue is related to a buffer copy without checking the size of input, also known as a 'Classic Buffer Overflow', in the stats-over-http plugin of Apache Traffic Server. This allows a remote attacker to overwrite memory, potentially leading to a denial of service.

Recommendations For Apache Traffic Server version 9.1.0, consider disabling the stats-over-http plugin as a temporary workaround until a patch is available. Restrict access to the vulnerable plugin to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.