Описание
The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake errors when built with the --with-openssl option, which allows remote attackers to cause a denial of service (application crash) via a plaintext HTTP message.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | not built with --with-openssl |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [not built with --with-openssl]] |
| precise | not-affected | not built with --with-openssl |
| trusty | not-affected | not built with --with-openssl |
| trusty/esm | DNE | trusty was not-affected [not built with --with-openssl] |
| upstream | released | 4.0.6 |
| vivid | not-affected | not built with --with-openssl |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE | |
| wily | not-affected | not built with --with-openssl |
Показывать по
EPSS
4.3 Medium
CVSS2
5.9 Medium
CVSS3
Связанные уязвимости
The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake errors when built with the --with-openssl option, which allows remote attackers to cause a denial of service (application crash) via a plaintext HTTP message.
The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake errors when built with the --with-openssl option, which allows remote attackers to cause a denial of service (application crash) via a plaintext HTTP message.
The FwdState::connectedToPeer method in FwdState.cc in Squid before 3. ...
The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly handle SSL handshake errors when built with the --with-openssl option, which allows remote attackers to cause a denial of service (application crash) via a plaintext HTTP message.
Уязвимость прокси-сервера Squid, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
4.3 Medium
CVSS2
5.9 Medium
CVSS3