CVE-2021-41585

HIGH

Apache Traffic Server 5.0.0-9.1.0 - Denial of Service via Socket Connection Handling

Title source: llm
STIX 2.1

Description

Improper Input Validation vulnerability in accepting socket connections in Apache Traffic Server allows an attacker to make the server stop accepting new connections. This issue affects Apache Traffic Server 5.0.0 to 9.1.0.

References (1)

Core 1
Core References
Mailing List, Patch, Vendor Advisory x_refsource_misc
https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164

Scores

CVSS v3 7.5
EPSS 0.0140
EPSS Percentile 80.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (1)
apache/traffic_server 8.0.0 - 8.1.2
Published Nov 03, 2021
Tracked Since Feb 18, 2026