CVE-2016-2571

http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP…

published February 27, 2016

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09288 · 95.3th percentile
Published
2016-02-27T02:00Z
EPSS history
Timeline
  • 27 FEB 02:00Z
    http.cc in Squid 3.x before 3.5.15 and 4.x before 4.0.7 proceeds with the storage of certain data after a response-parsing failure, which allows remote HTTP…
    cvelistv5