CVE-2021-31807
08.06.2021, 20:15
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent.Enginsight
| Vendor | Product | Version |
|---|---|---|
| squid-cache | squid | 3.0 ≤ 𝑥 < 4.15 |
| squid-cache | squid | 5.0 ≤ 𝑥 < 5.0.6 |
| squid-cache | squid | 2.5.stable2:stable2 |
| squid-cache | squid | 2.5.stable3:stable3 |
| squid-cache | squid | 2.5.stable4:stable4 |
| squid-cache | squid | 2.5.stable5:stable5 |
| squid-cache | squid | 2.5.stable6:stable6 |
| squid-cache | squid | 2.5.stable7:stable7 |
| squid-cache | squid | 2.5.stable8:stable8 |
| squid-cache | squid | 2.5.stable9:stable9 |
| squid-cache | squid | 2.5.stable10:stable10 |
| squid-cache | squid | 2.5.stable11:stable11 |
| squid-cache | squid | 2.5.stable12:stable12 |
| squid-cache | squid | 2.5.stable13:stable13 |
| squid-cache | squid | 2.5.stable14:stable14 |
| squid-cache | squid | 2.6 |
| squid-cache | squid | 2.7 |
| squid-cache | squid | 2.7:stable2 |
| squid-cache | squid | 2.7:stable3 |
| squid-cache | squid | 2.7:stable4 |
| squid-cache | squid | 2.7:stable5 |
| squid-cache | squid | 2.7:stable6 |
| squid-cache | squid | 2.7:stable7 |
| squid-cache | squid | 2.7:stable8 |
| squid-cache | squid | 2.7:stable9 |
| netapp | cloud_manager | - |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| squid |
| ||||||||||||||||||||||||
| squid3 |
|
References