Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-2621

medium · 5

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.

5
CVSS
23.0%
EPSS (exploit prob.)
98th
EPSS percentile
2009-07-28
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.0
squid-cachesquid3.1
squid-cachesquid3.1.0.1
squid-cachesquid3.1.0.2
squid-cachesquid3.1.0.3
squid-cachesquid3.1.0.4

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-2621