CVE-2009-2622
EUVD-2009-261728.07.2009, 17:30
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0 |
| squid-cache | squid | 3.0:rc1 |
| squid-cache | squid | 3.0:rc4 |
| squid-cache | squid | 3.1 |
| squid-cache | squid | 3.1.0.1 |
| squid-cache | squid | 3.1.0.2 |
| squid-cache | squid | 3.1.0.3 |
| squid-cache | squid | 3.1.0.4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References