CVE-2014-3609
HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted…
published September 11, 2014
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.
What it is
HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values."
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.56220 · 99.0th percentile
- Published
- 2014-09-11T18:00Z
EPSS history
Timeline