NetSight
IP …
medium5.0Public exploit code

CVE-2013-4123

client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.

Affected products

VendorProductAffected versions
Squid-CacheSquid
Versions 3.3.0, 3.3.0.2, 3.3.0.3, 3.3.1, 3.3.2, 3.3.3
OpensuseOpensuse
Version 12.3

Weakness classification

CWE-20

References