CVE-2009-2621

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to…

published July 28, 2009

CVSS

—

EPSS

23%

Percentile

97.8

In the wild

Unconfirmed

What it is

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.23049 · 97.8th percentile
Published: 2009-07-28T17:00Z

EPSS history

Timeline

28 JUL 17:00Z
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to…
cvelistv5