CVE-2013-1839

The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service…

published September 30, 2013

CVSS
—
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a "," character in an Accept-Language header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.18307 · 97.2th percentile
Published
2013-09-30T20:00Z
EPSS history
Timeline
  • 30 SEP 20:00Z
    The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service…
    cvelistv5