Evil-DB LogoEvil-DB
← All CVEs

CVE-2014-3609

medium · 5

HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values."

5
CVSS
56.2%
EPSS (exploit prob.)
99th
EPSS percentile
2014-09-11
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
squid-cachesquid3.1
squid-cachesquid3.1.0.1
squid-cachesquid3.1.0.2
squid-cachesquid3.1.0.3
squid-cachesquid3.1.0.4
squid-cachesquid3.1.0.5
squid-cachesquid3.1.0.6
squid-cachesquid3.1.0.7
squid-cachesquid3.1.0.8
squid-cachesquid3.1.0.9
squid-cachesquid3.1.0.10
squid-cachesquid3.1.0.11
squid-cachesquid3.1.0.12
squid-cachesquid3.1.0.13
squid-cachesquid3.1.0.14
squid-cachesquid3.1.0.15
squid-cachesquid3.1.0.16
squid-cachesquid3.1.0.17
squid-cachesquid3.1.0.18
squid-cachesquid3.1.1
squid-cachesquid3.1.2
squid-cachesquid3.1.3
squid-cachesquid3.1.4
squid-cachesquid3.1.5
squid-cachesquid3.1.5.1
squid-cachesquid3.1.6
squid-cachesquid3.1.7
squid-cachesquid3.1.8
squid-cachesquid3.1.9
squid-cachesquid3.1.10
squid-cachesquid3.1.11
squid-cachesquid3.1.12
squid-cachesquid3.1.13
squid-cachesquid3.1.14
squid-cachesquid3.1.15
squid-cachesquid3.2.0.1
squid-cachesquid3.2.0.2
squid-cachesquid3.2.0.3
squid-cachesquid3.2.0.4
squid-cachesquid3.2.0.5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-3609