CVE-2021-27737
First published: Fri May 14 2021(Updated: )
Apache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin.
Credit: security@apache.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache Traffic Server | =9.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lists.apache.org/thread.html/r74f72650c3590478f028ea3a1b8cab2a33d20ad9ff407e894ca70525%40%3Cannounce.trafficserver.apache.org%3E
- https://lists.apache.org/thread.html/r74f72650c3590478f028ea3a1b8cab2a33d20ad9ff407e894ca70525@%3Cannounce.trafficserver.apache.org%3E
- https://lists.apache.org/thread.html/r74f72650c3590478f028ea3a1b8cab2a33d20ad9ff407e894ca70525@%3Cdev.trafficserver.apache.org%3E
- https://lists.apache.org/thread.html/r74f72650c3590478f028ea3a1b8cab2a33d20ad9ff407e894ca70525@%3Cusers.trafficserver.apache.org%3E
- https://lists.apache.org/thread.html/r74f72650c3590478f028ea3a1b8cab2a33d20ad9ff407e894ca70525%40%3Cdev.trafficserver.apache.org%3E
- https://lists.apache.org/thread.html/r74f72650c3590478f028ea3a1b8cab2a33d20ad9ff407e894ca70525%40%3Cusers.trafficserver.apache.org%3E
Frequently Asked Questions
What is CVE-2021-27737?
CVE-2021-27737 is a vulnerability in Apache Traffic Server 9.0.0 that allows for a remote Denial of Service (DOS) attack on the experimental Slicer plugin.
How severe is CVE-2021-27737?
CVE-2021-27737 has a severity rating of 7.5, which is considered high.
Which version of Apache Traffic Server is affected by CVE-2021-27737?
CVE-2021-27737 affects Apache Traffic Server 9.0.0.
How can I fix CVE-2021-27737?
There is no known fix or patch available for CVE-2021-27737 at this time. It is recommended to monitor the Apache Traffic Server security advisories for updates.
Where can I find more information about CVE-2021-27737?
You can find more information about CVE-2021-27737 on the Apache Traffic Server mailing list threads provided in the references.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/type
- agent/event
- agent/description
- agent/tags
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/apache
- canonical/apache traffic server
- version/apache traffic server/9.0.0