NetSight
IP …
high7.5

CVE-2021-28651

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6.

Impact

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of service. When resolving a request with the urn: scheme, the parser leaks a small amount of memory. However, there is an unspecified attack methodology that can easily trigger a large amount of memory consumption.

Affected products

VendorProductAffected versions
Squid-CacheSquid
from 2.0 before 4.15
from 5.0 before 5.0.6
DebianDebian Linux
Versions 9.0, 10.0
FedoraprojectFedora
Versions 33, 34
NetappCloud Manager
All versions

Weakness classification

CWE-401

References