CVE-2021-28662
27.05.2021, 12:15
An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6. If a remote server sends a certain response header over HTTP or HTTPS, there is a denial of service. This header can plausibly occur in benign network traffic.Enginsight
| Vendor | Product | Version |
|---|---|---|
| squid-cache | squid | 4.0.1 ≤ 𝑥 < 4.15 |
| squid-cache | squid | 5.0 ≤ 𝑥 < 5.0.6 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| squid |
| ||||||||||||||||
| squid3 |
|
References