← volver
CVE-2009-2621

CVE-2009-2621

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 23%
probabilidad de explotación
23%top 2% de las CVE
explotación observada
noninguna fuente lo reporta
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.
Productos afectados
n/a · n/a
Referencias
http://secunia.com/advisories/36007http://www.mandriva.com/security/advisories?name=MDVSA-2009:161http://www.mandriva.com/security/advisories?name=MDVSA-2009:178http://www.securityfocus.com/bid/35812http://www.securitytracker.com/id?1022607http://www.squid-cache.org/Advisories/SQUID-2009_2.txthttp://www.squid-cache.org/Versions/v3/3.1/changesets/b9654.patchhttp://www.vupen.com/english/advisories/2009/2013