CVE-2021-37148

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-37148
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-37148.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-37148
Downstream
Published
2021-11-03T16:15:08.043Z
Modified
2026-05-18T05:53:04.902602351Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "8.0.0"
                },
                {
                    "last_affected": "8.1.2"
                }
            ],
            "source": "CPE_FIELD",
            "vendor_product": "apache:traffic_server"
        },
        {
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "10.0"
                },
                {
                    "last_affected": "11.0"
                }
            ],
            "source": "CPE_FIELD",
            "vendor_product": "debian:debian_linux"
        }
    ]
}
References

Affected packages

Git / github.com/apache/trafficserver

Affected ranges

Type
GIT
Repo
https://github.com/apache/trafficserver
Events
Introduced
b14030656330ed623cd1f9efe2f4f9abd9d16e29
Last affected
3bb1ae9fa5c71b8e65cb782f402d8780b522693d
Database specific 
{
    "extracted_events": [
        {
            "introduced": "9.0.0"
        },
        {
            "last_affected": "9.0.1"
        }
    ],
    "source": "CPE_FIELD",
    "cpe": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*"
}

Affected versions

9.*
9.0.0
9.0.0-rc1
9.0.1
9.0.1-rc0
9.0.1-rc1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-37148.json"