CVE-2014-0128

Squid 3.1-3.3.11 and 3.4-3.4.3 - Denial of Service via Crafted Range Request

Title source: llm
STIX 2.1

Description

Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service (assertion failure) via a crafted range request, related to state management.

References (9)

Core 9
Core References
Vendor Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-04/msg00030.html
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-04/msg00060.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/57889
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/57288
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/66112
Vendor Advisory x_refsource_confirm
http://www.squid-cache.org/Advisories/SQUID-2014_1.txt

Scores

EPSS 0.3286
EPSS Percentile 98.2%

Details

CWE
CWE-20
Status published
Products (50)
opensuse/opensuse 11.4
squid-cache/squid 3.1
squid-cache/squid 3.1.0.1
squid-cache/squid 3.1.0.2
squid-cache/squid 3.1.0.3
squid-cache/squid 3.1.0.4
squid-cache/squid 3.1.0.5
squid-cache/squid 3.1.0.6
squid-cache/squid 3.1.0.7
squid-cache/squid 3.1.0.8
... and 40 more
Published Apr 14, 2014
Tracked Since Feb 18, 2026