// For flags

CVE-2012-5643

squid: cachemgr.cgi memory usage DoS and memory leaks

Severity Score

5.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.

Varias fugas de memoria en tools/cachemgr.cc en cachemgr.cgi en Squid v2.x y v3.x antes de v3.1.22, v3.2.x antes de v3.2.4 y v3.3.x antes de v3.3.0.2 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de (1) cabeceras Content-Length no válidas, (2) largas peticiones POST, o (3) credenciales de autenticación manipuladas.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2012-10-24 CVE Reserved
  • 2012-12-20 CVE Published
  • 2024-01-14 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
  • CWE-401: Missing Release of Memory after Effective Lifetime
CAPEC
References (21)
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.0
Search vendor "Squid-cache" for product "Squid" and version "2.0"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.1
Search vendor "Squid-cache" for product "Squid" and version "2.1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.2
Search vendor "Squid-cache" for product "Squid" and version "2.2"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.3
Search vendor "Squid-cache" for product "Squid" and version "2.3"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.4
Search vendor "Squid-cache" for product "Squid" and version "2.4"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.5
Search vendor "Squid-cache" for product "Squid" and version "2.5"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.6
Search vendor "Squid-cache" for product "Squid" and version "2.6"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.7
Search vendor "Squid-cache" for product "Squid" and version "2.7"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.7
Search vendor "Squid-cache" for product "Squid" and version "2.7"
stable3
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
2.7
Search vendor "Squid-cache" for product "Squid" and version "2.7"
stable4
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre1
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre2
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre3
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre4
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre5
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre6
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
pre7
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0
Search vendor "Squid-cache" for product "Squid" and version "3.0"
rc4
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable1
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable2
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable2"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable3
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable3"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable4
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable4"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable5
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable5"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable6
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable6"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable7
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable7"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable8
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable8"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable9
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable9"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable10
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable10"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable11
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable11"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable11
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable11"
rc1
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable12
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable12"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable13
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable13"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable14
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable14"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable15
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable15"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable16
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable16"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable16
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable16"
rc1
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable17
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable17"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable18
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable18"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable19
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable19"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable20
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable20"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable21
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable21"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable22
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable22"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable23
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable23"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable24
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable24"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.0.stable25
Search vendor "Squid-cache" for product "Squid" and version "3.0.stable25"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1
Search vendor "Squid-cache" for product "Squid" and version "3.1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.1
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.2
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.2"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.3
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.3"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.4
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.4"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.5
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.5"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.6
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.6"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.7
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.7"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.8
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.8"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.9
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.9"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.10
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.10"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.11
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.11"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.12
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.12"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.13
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.13"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.14
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.14"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.15
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.15"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.16
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.16"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.17
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.17"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.0.18
Search vendor "Squid-cache" for product "Squid" and version "3.1.0.18"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.1
Search vendor "Squid-cache" for product "Squid" and version "3.1.1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.2
Search vendor "Squid-cache" for product "Squid" and version "3.1.2"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.10
Search vendor "Squid-cache" for product "Squid" and version "3.1.10"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.11
Search vendor "Squid-cache" for product "Squid" and version "3.1.11"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.12
Search vendor "Squid-cache" for product "Squid" and version "3.1.12"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.13
Search vendor "Squid-cache" for product "Squid" and version "3.1.13"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.14
Search vendor "Squid-cache" for product "Squid" and version "3.1.14"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.15
Search vendor "Squid-cache" for product "Squid" and version "3.1.15"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.16
Search vendor "Squid-cache" for product "Squid" and version "3.1.16"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.17
Search vendor "Squid-cache" for product "Squid" and version "3.1.17"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.18
Search vendor "Squid-cache" for product "Squid" and version "3.1.18"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.19
Search vendor "Squid-cache" for product "Squid" and version "3.1.19"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.20
Search vendor "Squid-cache" for product "Squid" and version "3.1.20"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.1.21
Search vendor "Squid-cache" for product "Squid" and version "3.1.21"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.1
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.2
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.2"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.3
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.3"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.4
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.4"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.5
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.5"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.6
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.6"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.7
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.7"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.8
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.8"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.9
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.9"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.10
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.10"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.11
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.11"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.12
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.12"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.13
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.13"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.14
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.14"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.15
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.15"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.16
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.16"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.17
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.17"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.18
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.18"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.0.19
Search vendor "Squid-cache" for product "Squid" and version "3.2.0.19"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.1
Search vendor "Squid-cache" for product "Squid" and version "3.2.1"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.2
Search vendor "Squid-cache" for product "Squid" and version "3.2.2"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.2.3
Search vendor "Squid-cache" for product "Squid" and version "3.2.3"
-
Affected
Squid-cache
Search vendor "Squid-cache"
Squid
Search vendor "Squid-cache" for product "Squid"
3.3.0.1
Search vendor "Squid-cache" for product "Squid" and version "3.3.0.1"
-
Affected