WID-SEC-W-2022-0672

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Squid: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2021-05-10

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um einen Denial of Service Angriff durchzuführen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2021-31808USmedium6.5—
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to a Denial of Service attack (against all clients using the pro…
CVE-2021-31806USmedium6.5Exploit
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a Denial of Service attack (against all clients using the pro…
CVE-2021-28662USmedium6.5—
An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6. If a remote server sends a certain response header over HTTP or HTTPS, there is a denial of service. This hea…
CVE-2021-28652USmedium4.9—
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allo…
CVE-2021-28651UShigh7.5—
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of service. When resolving a request with the urn: scheme, the…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan