Apache Traffic Server Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2021-43082)

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0.

Remediation

References

CVE-2021-43082

Related Vulnerabilities

Python Improper Input Validation Vulnerability (CVE-2023-24329)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5710)

WordPress 4.9.x Multiple Vulnerabilities (4.9 - 4.9.22)

MySQL CVE-2022-21412 Vulnerability (CVE-2022-21412)

Oracle JRE CVE-2013-5787 Vulnerability (CVE-2013-5787)

Severity

Critical

Classification

CVE-2021-43082 CWE-120 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H