CVE-2021-33620

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response

Medium · published May 28, 2021

Patch now

High probability of exploitation

CVSS calls it medium at 6.5. It sits in the 99.6th percentile for exploit probability.

CVSS v3.1
6.5
EPSS
80%
Percentile
99.6
In the wild
Unconfirmed
What it is

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent by the server.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.79583 · 99.6th percentile
Published
2021-05-28T00:00Z
EPSS history
Timeline
  • 28 MAY 00:00Z
    Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response
    cvelistv5