Description

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a Denial of Service attack (against all clients using the proxy) via HTTP Range request processing.

Remediation

References

CVE-2021-31806

Related Vulnerabilities

WordPress Plugin Restricted Site Access Unspecified Vulnerability (2.0)

WordPress Plugin Site Analytics Multiple Vulnerabilities (1.4.3)

Jenkins Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2017-1000393)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-3129)

WordPress Plugin Buzzwords Cross-Site Scripting (1.1.0)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CWE-116 CVE-2021-31806