NetSight
IP …
medium6.5

CVE-2021-33620

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response.

Impact

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent by the server.

Affected products

VendorProductAffected versions
Squid-CacheSquid
before 4.15
from 5.0 before 5.0.6
FedoraprojectFedora
Versions 33, 34
DebianDebian Linux
Version 9.0

Weakness classification

CWE-20

References