Description
The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.
Remediation
References
Related Vulnerabilities
WordPress Plugin Advanced File Manager Information Disclosure (5.2.4)
WordPress Plugin Browser and Operating System Finder Cross-Site Request Forgery (1.1)
WordPress Plugin Disqus Comment System Multiple Cross-Site Request Forgery Vulnerabilities (2.77)
WordPress Plugin Consulting Elementor Widgets Local File Inclusion (1.3.0)
Oracle Database Server CVE-2020-2510 Vulnerability (CVE-2020-2510)