CVE-2021-44040

CVE-2021-44040: HTTP request line fuzzing attacks

Vendor Apache Software Foundation
Product Apache Traffic Server
Weakness CWE-20 · Input validation
Published March 23, 2022
Last update August 4, 2024

CVSS base score

What the vulnerability does

01Description

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1.

Key dates

02Disclosure timeline

March 23, 2022 CVE published
August 4, 2024 Record updated