VYPR
← All advisories
High severity7.5NVD Advisory· Published Mar 23, 2022· Updated Jun 17, 2026

CVE-2021-44040

CVE-2021-44040

Description

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1.

Affected products

5
  • Apache/trafficserver3 versions
    cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*range: >=8.0.0,<=8.1.3
    • (no CPE)range: 8.0.0-8.1.3, 9.0.0-9.1.1
    • (no CPE)range: 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1
  • Debian/linux2 versions
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.