CVE-2021-28652

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6

published May 27, 2021

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory leaks that. over time, lead to a Denial of Service via an unspecified short query string. This attack is limited to clients with Cache Manager API access privilege.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04341 · 91.2th percentile
Published
2021-05-27T00:00Z
EPSS history
Timeline
  • 27 MAY 00:00Z
    An issue was discovered in Squid before 4.15 and 5.x before 5.0.6
    cvelistv5