CVE-2016-2569

Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service…

published February 27, 2016

CVSS
—
EPSS
31%
Percentile
98.3
In the wild
Unconfirmed
What it is

Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long string, as demonstrated by a crafted HTTP Vary header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.31187 · 98.3th percentile
Published
2016-02-27T02:00Z
EPSS history
Timeline
  • 27 FEB 02:00Z
    Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service…
    cvelistv5