| Package | Affected versions | Patched versions |
|---|---|---|
| squid | = 2.7 |
The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free