PT-2022-11974

CVE-2021-44040

Published

2022-03-23

Updated

2022-10-14

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 8.1.3 Apache Traffic Server versions 9.0.0 through 9.1.1

Description The issue is related to improper input validation in request line parsing, allowing an attacker to send invalid requests.

Recommendations For Apache Traffic Server versions 8.0.0 through 8.1.3, update to a version outside of this range to resolve the issue. For Apache Traffic Server versions 9.0.0 through 9.1.1, update to a version outside of this range to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Bahruz Jabiyev

Kaan Onarlioglu

Steven Sprecher

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers