Known vulnerabilities in trafficserver (Debian package) 8.0.2+ds-1+deb10u3

Vendor: Debian
Version: 8.0.2+ds-1+deb10u3
Software CPE: cpe:2.3:o:debian:trafficserver_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting trafficserver (Debian package) version 8.0.2+ds-1+deb10u3 trafficserver (Debian package) 8.0.2+ds-1+deb10u3 is affected by 13 vulnerabilities: 1 high, 12 medium Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63859 - Improper Authentication
CVE-2021-44759
CWE-287 Medium
No
No
8.0.2+ds-1+deb10u6, 8.1.1+ds-1.1+deb11u1 31.05.2022 SB2022053109
SB2022053111
#VU63858 - Improper input validation
CVE-2021-44040
CWE-20 Medium
No
No
8.0.2+ds-1+deb10u6, 8.1.1+ds-1.1+deb11u1 31.05.2022 SB2022053109
SB2022053111
SB2022060237
#VU58652 - Improper Certificate Validation
CVE-2021-38161
CWE-295 Medium
No
No
8.0.2+ds-1+deb10u6, 8.1.1+ds-1.1+deb11u1 08.12.2021 SB2021120804
SB2022053111
#VU58643 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-37149
CWE-444 Medium
No
No
8.0.2+ds-1+deb10u6, 8.1.1+ds-1.1+deb11u1 08.12.2021 SB2021120804
SB2022053111
SB2021111930
#VU58641 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-37148
CWE-444 Medium
No
No
8.0.2+ds-1+deb10u6, 8.1.1+ds-1.1+deb11u1 08.12.2021 SB2021120804
SB2022053111
#VU58639 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-37147
CWE-444 Medium
No
No
8.0.2+ds-1+deb10u6, 8.1.1+ds-1.1+deb11u1 08.12.2021 SB2021120804
SB2022053111
SB2021111930
#VU54464 - Stack-based buffer overflow
CVE-2021-35474
CWE-121 High
No
No
8.0.2+ds-1+deb10u5 30.06.2021 SB2021063020
SB2021081714
#VU54463 - Resource Management Errors
CVE-2021-32567
CWE-399 Medium
No
No
8.0.2+ds-1+deb10u5 30.06.2021 SB2021063020
SB2021081714
#VU54462 - Improper input validation
CVE-2021-32566
CWE-20 Medium
No
No
8.0.2+ds-1+deb10u5 30.06.2021 SB2021063020
SB2021081714
#VU54461 - Improper input validation
CVE-2021-27577
CWE-20 Medium
No
No
8.0.2+ds-1+deb10u5 30.06.2021 SB2021063020
SB2021081714
#VU54459 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-32565
CWE-444 Medium
No
No
8.0.2+ds-1+deb10u5 30.06.2021 SB2021063020
SB2021081714
#VU48817 - Improper input validation
CVE-2020-17509
CWE-20 Medium
No
No
8.0.2+ds-1+deb10u4 08.12.2020 SB2020120802
SB2020120804
#VU48816 - Missing release of memory after effective lifetime
CVE-2020-17508
CWE-401 Medium
No
No
8.0.2+ds-1+deb10u4 08.12.2020 SB2020120803
SB2020120804