CVE-2021-28652
27.05.2021, 12:15
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory leaks that. over time, lead to a Denial of Service via an unspecified short query string. This attack is limited to clients with Cache Manager API access privilege.Enginsight
| Vendor | Product | Version |
|---|---|---|
| squid-cache | squid | 1.0 ≤ 𝑥 < 4.15 |
| squid-cache | squid | 5.0 ≤ 𝑥 < 5.0.6 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| squid |
| ||||||||||||||||
| squid3 |
|
Common Weakness Enumeration
References