Security Advisory

CVE-2009-2621

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-07-28 17:00:00
Last updated 2024-08-07 05:59:55
Assigner certcc
CVSS score not scored
State PUBLISHED

Description

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.