CVE-2021-44040

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Apache Software Foundation	Apache Traffic Server	8.0.0 to 8.1.3 and 9.0.0 to 9.1.1

References

https://lists.apache.org/thread/zblwzcfs9ryhwjr89wz4osw55pxm6dx6Mailing List, Vendor Advisory
https://www.debian.org/security/2022/dsa-5153Third Party Advisory
https://lists.apache.org/thread/zblwzcfs9ryhwjr89wz4osw55pxm6dx6Mailing List, Vendor Advisory
https://www.debian.org/security/2022/dsa-5153Third Party Advisory

Timeline

Published: Mar 23, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-440419.8UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI h CVE-2021-440429.8An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the URI handler for uip CVE-2021-440435.4An issue was discovered in UiPath App Studio 21.4.4. There is a persistent XSS vulnerability in the file-upload functionality for uploading CVE-2021-440447.8An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11. The specific iss CVE-2021-440457.8An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific iss CVE-2021-440467.8An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11. An unchecked return value CVE-2021-440477.8A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issu CVE-2021-440487.8An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance (ODA) Drawings Explorer before 2022.11. The s CVE-2021-440497.8CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan CVE-2021-44054.3The ElasticPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.3. This is due to mi CVE-2021-440506.5CA Network Flow Analysis (NFA) 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient inpu CVE-2021-440518.8A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerabilit