Total vulnerabilities in the database
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.
| Software | From | Fixed in |
|---|---|---|
| squid-cache / squid | 3.0-rc4 | 3.0-rc4.x |
| squid-cache / squid | 3.0 | 3.0.x |
| squid-cache / squid | 3.1.0.3 | 3.1.0.3.x |
| squid-cache / squid | 3.1.0.1 | 3.1.0.1.x |
| squid-cache / squid | 3.0-rc1 | 3.0-rc1.x |
| squid-cache / squid | 3.1.0.2 | 3.1.0.2.x |
| squid-cache / squid | 3.1.0.4 | 3.1.0.4.x |
| squid-cache / squid | 3.1 | 3.1.x |