Evil-DB LogoEvil-DB
← All CVEs

CVE-2014-0128

medium · 5

Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service (assertion failure) via a crafted range request, related to state management.

5
CVSS
32.9%
EPSS (exploit prob.)
98th
EPSS percentile
2014-04-14
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
squid-cachesquid3.1
squid-cachesquid3.1.0.1
squid-cachesquid3.1.0.2
squid-cachesquid3.1.0.3
squid-cachesquid3.1.0.4
squid-cachesquid3.1.0.5
squid-cachesquid3.1.0.6
squid-cachesquid3.1.0.7
squid-cachesquid3.1.0.8
squid-cachesquid3.1.0.9
squid-cachesquid3.1.0.10
squid-cachesquid3.1.0.11
squid-cachesquid3.1.0.12
squid-cachesquid3.1.0.13
squid-cachesquid3.1.0.14
squid-cachesquid3.1.0.15
squid-cachesquid3.1.0.16
squid-cachesquid3.1.0.17
squid-cachesquid3.1.0.18
squid-cachesquid3.1.1
squid-cachesquid3.1.2
squid-cachesquid3.1.3
squid-cachesquid3.1.4
squid-cachesquid3.1.5
squid-cachesquid3.1.5.1
squid-cachesquid3.1.6
squid-cachesquid3.1.7
squid-cachesquid3.1.8
squid-cachesquid3.1.9
squid-cachesquid3.1.10
squid-cachesquid3.1.11
squid-cachesquid3.1.12
squid-cachesquid3.1.13
squid-cachesquid3.1.14
squid-cachesquid3.1.15
squid-cachesquid3.2.0.1
squid-cachesquid3.2.0.2
squid-cachesquid3.2.0.3
squid-cachesquid3.2.0.4
squid-cachesquid3.2.0.5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-0128