VULNERABILITY INTELLIGENCE
CVE-2009-2622
CVSS score5 MEDIUM
EPSS probability56.91%
CISA KEVNot currently listed
Published2009-07-28
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.
Weakness classification
- CWE-20: Improper Input Validation