CVE-2021-28662

An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6

published May 27, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS
—
EPSS
72%
Percentile
99.4
In the wild
Unconfirmed
What it is

An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6. If a remote server sends a certain response header over HTTP or HTTPS, there is a denial of service. This header can plausibly occur in benign network traffic.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.71760 · 99.4th percentile
Published
2021-05-27T00:00Z
EPSS history
Timeline
  • 27 MAY 00:00Z
    An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6
    cvelistv5