by Kastro
Paper/Archive/CVE-2021-35474

CVE-2021-35474

Apache Software Foundation Apache Traffic Server — Dynamic stack buffer overflow in cachekey plugin

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 86.0.860 × 2017.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

Affected

ProductAffectedFixed inSource
Apache Traffic ServerApache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reflists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3Eadvisorydebian.org/security/2021/dsa-4957