CVE-2018-1172CWE-476

This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-20180318

published May 16, 2018

CVSS
—
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-20180318. Authentication is not required to exploit this vulnerability. The specific flaw exists within ClientRequestContext::sslBumpAccessCheck(). A crafted request can trigger the dereference of a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition to users of the system. Was ZDI-CAN-6088.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08310 · 94.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2018-05-16T21:00Z
EPSS history
Timeline
  • 16 MAY 21:00Z
    This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-20180318
    cvelistv5