Description

Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.

Remediation

References

CVE-2012-5643

Related Vulnerabilities

Oracle JRE CVE-2013-5820 Vulnerability (CVE-2013-5820)

Oracle Application Server CVE-2008-0348 Vulnerability (CVE-2008-0348)

PHP NULL Pointer Dereference Vulnerability (CVE-2016-7131)

Atlassian Jira CVE-2020-14168 Vulnerability (CVE-2020-14168)

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0795)

Severity

Medium

Classification

CVE-2012-5643 CWE-20

Tags

Missing Update Known Vulnerabilities