Lucene search

K
osvGoogleOSV:DLA-45-1
HistorySep 04, 2014 - 12:00 a.m.

squid3 - security update

2014-09-0400:00:00
Google
osv.dev
12

0.958 High

EPSS

Percentile

99.4%

CVE-2014-3609: Denial of Service in Range header processing.

Ignore Range headers with unidentifiable byte-range values. If squid is
unable to determine the byte value for ranges, treat the header as
invalid.

For Debian 6 Squeeze, these issues have been fixed in squid3 version 3.1.6-1.2+squeeze4