You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@trafficserver.apache.org by Bryan Call <bc...@apache.org> on 2021/05/13 15:58:04 UTC

[ANNOUNCE] Apache Traffic Server is vulnerable to a DOS attack in the experimental Slicer plugin

Description:
ATS is vulnerable to a remote DOS attack on the experimental Slicer plugin.

CVE:
CVE-2021-27737

Reported By:
Brian Olsen

Vendor:
The Apache Software Foundation

Version Affected:
ATS 9.0.0

Mitigation:
9.x users should upgrade to 9.0.1 or later versions

References:
	Downloads:
		https://trafficserver.apache.org/downloads
		(Please use backup sites from the link only if the mirrors are unavailable) 
	CVE:
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27737

-Bryan