Description

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.

Remediation

References

CVE-2009-2622

Related Vulnerabilities

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-11326)

Oracle JRE CVE-2012-5072 Vulnerability (CVE-2012-5072)

WordPress Plugin RSVP and Event Management Cross-Site Scripting (2.3.7)

XWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2022-41932)

PostgreSQL CVE-2017-7548 Vulnerability (CVE-2017-7548)

Severity

Medium

Classification

CVE-2009-2622 CWE-20

Tags

Missing Update Known Vulnerabilities