// For flags

CVE-2012-5643

squid: cachemgr.cgi memory usage DoS and memory leaks

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.

Varias fugas de memoria en tools/cachemgr.cc en cachemgr.cgi en Squid v2.x y v3.x antes de v3.1.22, v3.2.x antes de v3.2.4 y v3.3.x antes de v3.3.0.2 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de (1) cabeceras Content-Length no válidas, (2) largas peticiones POST, o (3) credenciales de autenticación manipuladas.

Multiple vulnerabilities have been found in Squid, possibly resulting in remote Denial of Service. Versions less than 3.2.13 are affected.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2012-10-24 CVE Reserved
  • 2012-12-20 CVE Published
  • 2024-08-06 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
  • CWE-401: Missing Release of Memory after Effective Lifetime
CAPEC
References (21)
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.0
Search vendor "Squid-cache" for product "Squid" and version "2.0"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.1
Search vendor "Squid-cache" for product "Squid" and version "2.1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.2
Search vendor "Squid-cache" for product "Squid" and version "2.2"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.3
Search vendor "Squid-cache" for product "Squid" and version "2.3"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.4
Search vendor "Squid-cache" for product "Squid" and version "2.4"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.5
Search vendor "Squid-cache" for product "Squid" and version "2.5"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.6
Search vendor "Squid-cache" for product "Squid" and version "2.6"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.7
Search vendor "Squid-cache" for product "Squid" and version "2.7"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.7
Search vendor "Squid-cache" for product "Squid" and version "2.7"
stable3
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.7
Search vendor "Squid-cache" for product "Squid" and version "2.7"
stable4
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre1
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre2
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre3
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre4
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre5
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre6
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre7
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
rc4
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable1
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable2
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable2"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable3
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable3"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable4
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable4"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable5
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable5"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable6
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable6"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable7
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable7"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable8
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable8"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable9
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable9"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable10
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable10"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable11
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable11"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable11
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable11"
rc1
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable12
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable12"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable13
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable13"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable14
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable14"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable15
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable15"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable16
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable16"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable16
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable16"
rc1
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable17
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable17"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable18
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable18"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable19
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable19"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable20
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable20"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable21
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable21"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable22
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable22"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable23
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable23"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable24
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable24"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable25
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable25"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1
Search vendor "Squid-cache" for product "Squid" and version "3.1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.1
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.2
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.2"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.3
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.3"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.4
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.4"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.5
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.5"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.6
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.6"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.7
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.7"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.8
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.8"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.9
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.9"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.10
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.10"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.11
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.11"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.12
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.12"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.13
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.13"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.14
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.14"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.15
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.15"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.16
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.16"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.17
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.17"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.18
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.18"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.1
Search vendor "Squid-cache" for product "Squid" and version "3.1.1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.2
Search vendor "Squid-cache" for product "Squid" and version "3.1.2"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.10
Search vendor "Squid-cache" for product "Squid" and version "3.1.10"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.11
Search vendor "Squid-cache" for product "Squid" and version "3.1.11"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.12
Search vendor "Squid-cache" for product "Squid" and version "3.1.12"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.13
Search vendor "Squid-cache" for product "Squid" and version "3.1.13"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.14
Search vendor "Squid-cache" for product "Squid" and version "3.1.14"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.15
Search vendor "Squid-cache" for product "Squid" and version "3.1.15"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.16
Search vendor "Squid-cache" for product "Squid" and version "3.1.16"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.17
Search vendor "Squid-cache" for product "Squid" and version "3.1.17"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.18
Search vendor "Squid-cache" for product "Squid" and version "3.1.18"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.19
Search vendor "Squid-cache" for product "Squid" and version "3.1.19"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.20
Search vendor "Squid-cache" for product "Squid" and version "3.1.20"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.21
Search vendor "Squid-cache" for product "Squid" and version "3.1.21"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.1
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.2
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.2"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.3
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.3"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.4
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.4"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.5
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.5"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.6
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.6"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.7
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.7"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.8
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.8"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.9
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.9"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.10
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.10"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.11
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.11"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.12
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.12"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.13
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.13"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.14
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.14"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.15
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.15"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.16
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.16"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.17
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.17"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.18
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.18"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.19
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.19"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.1
Search vendor "Squid-cache" for product "Squid" and version "3.2.1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.2
Search vendor "Squid-cache" for product "Squid" and version "3.2.2"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.3
Search vendor "Squid-cache" for product "Squid" and version "3.2.3"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.3.0.1
Search vendor "Squid-cache" for product "Squid" and version "3.3.0.1"
-
Affected