CVE-2018-1000027

The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response…

published February 9, 2018

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via Remote HTTP server responding with an X-Forwarded-For header to certain types of HTTP request. This vulnerability appears to have been fixed in 4.0.23 and later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12912 · 96.3th percentile
Published
2018-02-09T23:00Z
EPSS history
Timeline
  • 09 FEB 23:00Z
    The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response…
    cvelistv5