| Package | Affected versions | Patched versions |
|---|---|---|
| squid | = 2.7.stable1= 2.7.stable2= 2.7.stable3= 2.7.stable4= 2.7.stable5= 3.0.stable1= 3.0.stable10= 3.0.stable11= 3.0.stable12= 3.0.stable2= 3.0.stable3= 3.0.stable4= 3.0.stable5= 3.0.stable6= 3.0.stable7= 3.0.stable8= 3.0.stable9= 3.1= 3.1.0.1= 3.1.0.2= 3.1.0.3= 3.1.0.4 |
Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free