CVE-2021-28651

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a
buffer-management bug, it allows a denial of service. When resolving a
request with the urn: scheme, the parser leaks a small amount of memory.
However, there is an unspecified attack methodology that can easily trigger
a large amount of memory consumption.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988893&gt;
• <https://bugs.squid-cache.org/show_bug.cgi?id=5104&gt;