CVE-2021-35474

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 7.0.0 through 7.1.12 Apache Traffic Server versions 8.0.0 through 8.1.1 Apache Traffic Server versions 9.0.0 through 9.0.1

Description The issue is caused by a stack-based buffer overflow in the cachekey plugin of Apache Traffic Server. This can allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Apache Traffic Server versions 7.0.0 through 7.1.12, update to a version outside of this range to resolve the issue. For Apache Traffic Server versions 8.0.0 through 8.1.1, update to a version outside of this range to resolve the issue. For Apache Traffic Server versions 9.0.0 through 9.0.1, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling the cachekey plugin until a patch is available.