Squid Denial of Service
No sign of exploitation. No public exploitation artifact known so far.
Squid, a web caching proxy, can be crashed or become unavailable when a trusted server sends specially crafted requests, affecting all users relying on that proxy. This happens because Squid doesn't properly validate input and manage resources, allowing the server to trigger a denial of service.
A trusted upstream server can exploit input validation flaws and improper resource management (premature release during expected lifetime and missing release after effective lifetime) in Squid to trigger a denial of service condition affecting all downstream clients. The vulnerability requires a trusted server in the attack chain and is mitigated in Squid 6.10 default configuration.