This site is deprecated. Please
CLICK HERE for latest updates
Short Name |
APP:PROXY:SQUID-ACCEPT-LANG-DOS
|
Severity |
Major
|
Recommended |
No
|
Recommended Action |
Drop
|
Category |
APP
|
Keywords |
Squid strHdrAcptLangGetItem Value Denial of Service
|
Release Date |
2013/05/21
|
Update Number |
2265
|
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
APP: Squid strHdrAcptLangGetItem Value Denial of Service
This signature detects attempts to exploit a known vulnerability against Squid Proxy Server. A successful attack can result in a denial-of-service condition.
Extended Description
The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a "," character in an Accept-Language header.
Affected Products
- Squid-cache squid 3.2.0.1
- Squid-cache squid 3.2.0.10
- Squid-cache squid 3.2.0.11
- Squid-cache squid 3.2.0.12
- Squid-cache squid 3.2.0.13
- Squid-cache squid 3.2.0.14
- Squid-cache squid 3.2.0.15
- Squid-cache squid 3.2.0.16
- Squid-cache squid 3.2.0.17
- Squid-cache squid 3.2.0.18
- Squid-cache squid 3.2.0.19
- Squid-cache squid 3.2.0.2
- Squid-cache squid 3.2.0.3
- Squid-cache squid 3.2.0.4
- Squid-cache squid 3.2.0.5
- Squid-cache squid 3.2.0.6
- Squid-cache squid 3.2.0.7
- Squid-cache squid 3.2.0.8
- Squid-cache squid 3.2.0.9
- Squid-cache squid 3.2.1
- Squid-cache squid 3.2.2
- Squid-cache squid 3.2.3
- Squid-cache squid 3.2.4
- Squid-cache squid 3.2.5
- Squid-cache squid 3.2.6
- Squid-cache squid 3.2.7
- Squid-cache squid 3.2.8
- Squid-cache squid 3.3.0
- Squid-cache squid 3.3.0.2
- Squid-cache squid 3.3.0.3
- Squid-cache squid 3.3.1
- Squid-cache squid 3.3.2
References