CVE-2021-28652
- State
- Published
- Severity
- Not scored
- Published
- May 27, 2021
- Updated
- Aug 3, 2024
- Reserved
- Mar 17, 2021
Description
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory leaks that. over time, lead to a Denial of Service via an unspecified short query string. This attack is limited to clients with Cache Manager API access privilege.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://bugs.squid-cache.org/show_bug.cgi?id=5106
- https://github.com/squid-cache/squid/security/advisories/GHSA-m47m-9hvw-7447
- DSA-4924vendor-advisory
- FEDORA-2021-c0bec55ec7vendor-advisory
- FEDORA-2021-24af72ff2cvendor-advisory
- [debian-lts-announce] 20210614 [SECURITY] [DLA 2685-1] squid3 security updatemailing-list
- [oss-security] 20231011 Squid Caching Proxy Security Audit: 55 Vulnerabilities, 35 0days.mailing-list
- 20231016 Squid Caching Proxy Security Audit: 55 Vulnerabilities, 35 0days.mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.