Description

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.

Remediation

References

CVE-2009-2621

Related Vulnerabilities

WordPress Plugin Wp2android-webapp native mobile app builder free (android, IOs, Winphone mobile App) Arbitrary File Upload (1.1.4)

WordPress Plugin Stripe Payment for WooCommerce Security Bypass (3.7.7)

phpBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2003-1530)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (5.7.13)

Magento Cryptographic Issues Vulnerability (CVE-2019-7855)

Severity

Medium

Classification

CVE-2009-2621 CWE-119

Tags

Missing Update Known Vulnerabilities