{
  "cveId": "CVE-2021-44040",
  "url": "https://patchblox.com/security/cve/CVE-2021-44040",
  "summary": "CVE-2021-44040 is fixed in trafficserver on 1 platform by DEBIAN-CVE-2021-44040 (version 9.1.2\u002Bds-1), released March 23, 2022. It is not reported as exploited. Patch Radar priority: High.",
  "title": "trafficserver: Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send i...",
  "description": "Improper Input Validation vulnerability in request line parsing of Apache Traffic Server allows an attacker to send invalid requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.3 and 9.0.0 to 9.1.1.",
  "published": "2022-03-23T14:15:07Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
  "epss": 0.01991,
  "epssPercentile": 0.80786,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "trafficserver",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "9.1.2\u002Bds-1",
      "fix": "DEBIAN-CVE-2021-44040",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-44040",
      "released": "2022-03-23T14:15:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}