This site is deprecated. Please
CLICK HERE for latest updates
Short Name |
HTTP:REQERR:INV-HTTP-VERSION
|
Severity |
Minor
|
Recommended |
No
|
Category |
HTTP
|
Keywords |
Invalid HTTP Version (2)
|
Release Date |
2012/11/10
|
Update Number |
2202
|
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
HTTP: Invalid HTTP Version (2)
This signature detects invalid HTTP versions sent by clients. Some servers do not properly handle such requests, which can cause a Denial of Service (DoS) of the server.
Extended Description
Squid is prone to a remote denial-of-service vulnerability because the proxy server fails to handle certain HTTP requests.
Successfully exploiting this issue allows remote attackers to crash the affected application, denying further service to legitimate users.
This issue affects versions prior to Squid 2.7.STABLE5, Squid 3.0.STABLE12, and Squid 3.1.0.4.
Affected Products
- Debian linux 4.0
- Debian linux 4.0 Alpha
- Debian linux 4.0 Amd64
- Debian linux 4.0 Arm
- Debian linux 4.0 Armel
- Debian linux 4.0 Hppa
- Debian linux 4.0 Ia-32
- Debian linux 4.0 Ia-64
- Debian linux 4.0 M68k
- Debian linux 4.0 Mips
- Debian linux 4.0 Mipsel
- Debian linux 4.0 Powerpc
- Debian linux 4.0 S/390
- Debian linux 4.0 Sparc
- Gentoo linux
- Mandriva linux_mandrake 2008.1
- Mandriva linux_mandrake 2008.1 X86 64
- Mandriva linux_mandrake 2009.0
- Mandriva linux_mandrake 2009.0 X86 64
- Red_hat fedora 9
- Squid web_proxy_cache 2.7
- Squid web_proxy_cache 2.7.STABLE5
- Squid web_proxy_cache 3.0.0
- Squid web_proxy_cache 3.0.STABLE1
- Squid web_proxy_cache 3.0.STABLE12
- Squid web_proxy_cache 3.0.STABLE2
- Squid web_proxy_cache 3.0.STABLE3
- Squid web_proxy_cache 3.0.STABLE4
- Squid web_proxy_cache 3.0.STABLE5
- Squid web_proxy_cache 3.0.STABLE6
- Squid web_proxy_cache 3.0.STABLE7
- Squid web_proxy_cache 3.1
- Squid web_proxy_cache 3.1.0.4
- Suse opensuse 11.1
- Ubuntu ubuntu_linux 8.10 Amd64
- Ubuntu ubuntu_linux 8.10 I386
- Ubuntu ubuntu_linux 8.10 Lpia
- Ubuntu ubuntu_linux 8.10 Powerpc
- Ubuntu ubuntu_linux 8.10 Sparc
References