CVE-2009-2855

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain…

published August 18, 2009

CVSS
—
EPSS
34%
Percentile
98.4
In the wild
Unconfirmed
What it is

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.34031 · 98.4th percentile
Published
2009-08-18T20:41Z
EPSS history
Timeline
  • 18 AUG 20:41Z
    The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain…
    cvelistv5