Description

Invalid values in the Content-Length header sent to Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

Remediation

References

CVE-2021-32565

Related Vulnerabilities

OpenSSL Resource Management Errors Vulnerability (CVE-2016-2179)

Collabtive Improper Privilege Management Vulnerability (CVE-2013-5027)

Contao Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2024-28191)

WordPress 2.2.2 Multiple Vulnerabilities (2.2 - 2.2.2)

MySQL CVE-2019-2963 Vulnerability (CVE-2019-2963)

Severity

High

Classification

CVE-2021-32565 CWE-444 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities