CVE-2021-32566CWE-20

Specific sequence of HTTP/2 frames can cause ATS to crash

published June 30, 2021

CVSS
—
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02447 · 84.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-06-30T07:15Z
EPSS history
Timeline
  • 30 JUN 07:15Z
    Specific sequence of HTTP/2 frames can cause ATS to crash
    cvelistv5