Description

Invalid values in the Content-Length header sent to Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

Remediation

References

CVE-2021-32565

Related Vulnerabilities

MySQL CVE-2018-2813 Vulnerability (CVE-2018-2813)

Sqlite Improper Input Validation Vulnerability (CVE-2016-6153)

Magento Cacheleak

WordPress Plugin WordPress Slider-WP 1 Slider includes Backdoor [Only if downloaded via the vendor website] (1.2.9)

WordPress Plugin Thrive Comments Security Bypass (1.4.15.2)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities CWE-444 CVE-2021-32565