← voltar
CVE-2009-2621

CVE-2009-2621

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 23%
probabilidade de exploração
23%top 2% das CVEs
exploração observada
nãonenhuma fonte reporta
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.
Produtos afetados
n/a · n/a
Referências
http://secunia.com/advisories/36007http://www.mandriva.com/security/advisories?name=MDVSA-2009:161http://www.mandriva.com/security/advisories?name=MDVSA-2009:178http://www.securityfocus.com/bid/35812http://www.securitytracker.com/id?1022607http://www.squid-cache.org/Advisories/SQUID-2009_2.txthttp://www.squid-cache.org/Versions/v3/3.1/changesets/b9654.patchhttp://www.vupen.com/english/advisories/2009/2013