Page 8 of 72 results (0.005 seconds)

CVSS: 7.5EPSS: 94%CPEs: 88EXPL: 0

CVE-2014-3609 – squid: assertion failure in Range header processing (SQUID-2014:2)

https://notcve.org/view.php?id=CVE-2014-3609

28 Aug 2014 — HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values." HttpHdrRange.cc en Squid 3.x anterior a 3.3.12 y 3.4.x anterior a 3.4.6 permite a atacantes remotos causar una denegación de servicio (caída) a través de una solicitud con ' cabeceras de rango con valores de rango de bytes no identificables' manipuladas. A flaw was found in the way Squid handled malfor... • http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00025.html • CWE-20: Improper Input Validation CWE-617: Reachable Assertion •

CVSS: 7.5EPSS: 18%CPEs: 87EXPL: 0

CVE-2014-0128 – squid: denial of service when using SSL-Bump

https://notcve.org/view.php?id=CVE-2014-0128

14 Apr 2014 — Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service (assertion failure) via a crafted range request, related to state management. Squid 3.1 anterior a 3.3.12 y 3.4 anterior a 3.4.4, cuando SSL-Bump está habilitado, permite a atacantes remotos causar una denegación de servicio (fallo de aserción) a través de una solicitud de rango manipulada, relacionado con gestión de estado. Due to incorrect state management, Squid before 3.3.12 is vu... • http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html • CWE-20: Improper Input Validation •