← Database

CVE-2021-43082

CRITICAL CVSS: 9.8 Published: 2021-11-03 Modified: 2026-06-17

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0.

Affected Platforms

Apache Traffic Server

Weakness Type

CWE-120, CWE-120

References