Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-43082

Fixed in a distro release EPSS 2%

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0.

Published 2021-11-03 · CVE record · OSV

Products: Apache Software Foundation Apache Traffic Server

Distro releases

ReleasePackageFixed in
Debian 12trafficserver9.1.1+ds-1