Description

Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.

Remediation

References

CVE-2012-5643

Related Vulnerabilities

TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20115)

Jboss EAP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-7464)

PmWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4748)

WordPress Plugin Elementor-Header, Footer & Blocks Template Multiple Cross-Site Scripting Vulnerabilities (1.5.7)

Oracle Database Server CVE-2018-2575 Vulnerability (CVE-2018-2575)

Severity

Medium

Classification

CVE-2012-5643 CWE-20

Tags

Missing Update Known Vulnerabilities