Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-28652

Опубликовано: 27 мая 2021
Источник: ubuntu
Приоритет: low
CVSS2: 4
CVSS3: 4.9

Описание

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory leaks that. over time, lead to a Denial of Service via an unspecified short query string. This attack is limited to clients with Cache Manager API access privilege.

РелизСтатусПримечание
bionic

DNE

devel

released

4.13-10ubuntu1
esm-infra-legacy/trusty

DNE

esm-infra/focal

not-affected

4.10-1ubuntu1.4
focal

released

4.10-1ubuntu1.4
groovy

released

4.13-1ubuntu2.2
hirsute

released

4.13-1ubuntu4.1
impish

released

4.13-10ubuntu1
jammy

released

4.13-10ubuntu1
trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

released

3.5.27-1ubuntu1.11
devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

3.5.27-1ubuntu1.11
esm-infra/focal

DNE

esm-infra/xenial

ignored

focal

DNE

groovy

DNE

hirsute

DNE

impish

DNE

Показывать по

4 Medium

CVSS2

4.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.8
redhat
около 4 лет назад

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory leaks that. over time, lead to a Denial of Service via an unspecified short query string. This attack is limited to clients with Cache Manager API access privilege.

CVSS3: 4.9
nvd
около 4 лет назад

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory leaks that. over time, lead to a Denial of Service via an unspecified short query string. This attack is limited to clients with Cache Manager API access privilege.

CVSS3: 4.9
debian
около 4 лет назад

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due ...

CVSS3: 7.4
fstec
около 4 лет назад

Уязвимость компонента Cache Manager API прокси-сервера Squid, позволяющая нарушителю вызвать отказ в обслуживании

suse-cvrf
около 4 лет назад

Security update for squid

4 Medium

CVSS2

4.9 Medium

CVSS3

Уязвимость CVE-2021-28652