VULNERABILITY INTELLIGENCE
CVE-2009-2621
CVSS score5 NONE
EPSS probability23.05%
CISA KEVNot currently listed
Published2009-07-28
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.
Weakness classification
- nvd@nist.gov: CWE-119