title: heap-buffer-overflow with stats-over-http plugin
description: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0.
problem types: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
affected:
{
product: Apache Traffic Server
vendor: Apache Software Foundation
versions:
status: affected, version: 9.1.0
}