CVE-2021-44040
Fixed in a distro release EPSS 2%
Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1.
Products: Apache Software Foundation Apache Traffic Server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | trafficserver | 8.0.2+ds-1+deb10u6 |
| Debian 11 | trafficserver | 8.1.1+ds-1.1+deb11u1 |
| Debian 12 | trafficserver | 9.1.2+ds-1 |
| Ubuntu 18.04 LTS | trafficserver | no fix |
| Ubuntu Pro 20.04 LTS | trafficserver | no fix |
| Ubuntu Pro 22.04 LTS | trafficserver | no fix |