Vulnerability in N/a

CVE-2009-2622

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "miss…

EPSS: 0.569 (98.9th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

1022607 (vdb-entry, x_refsource_SECTRACK)
www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch (x_refsource_CONFIRM)
35812 (vdb-entry, x_refsource_BID)
ADV-2009-2013 (vdb-entry, x_refsource_VUPEN)
36007 (x_refsource_SECUNIA, third-party-advisory)
www.squid-cache.org/Advisories/SQUID-2009_2.txt (x_refsource_CONFIRM)
MDVSA-2009:161 (vendor-advisory, x_refsource_MANDRIVA)
MDVSA-2009:178 (vendor-advisory, x_refsource_MANDRIVA)