NetSight
IP …
medium6.5

CVE-2021-31807

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6.

Impact

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent.

Affected products

VendorProductAffected versions
Squid-CacheSquid
from 3.0 before 4.15
from 5.0 before 5.0.6
Versions 2.5.stable2, 2.5.stable3, 2.5.stable4, 2.5.stable5
FedoraprojectFedora
Versions 33, 34
NetappCloud Manager
All versions

Weakness classification

CWE-190

References