Squid Improper Input Validation Vulnerability (CVE-2014-3609)

Description

HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values."

Remediation

References

CVE-2014-3609

Related Vulnerabilities

WordPress Plugin CKEditor for WordPress Cross-Site Scripting (4.5.3)

MySQL CVE-2020-14773 Vulnerability (CVE-2020-14773)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4305)

WordPress Plugin Import all XML, CSV & TXT into WordPress Unspecified Vulnerability (3.7.2)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-3810)

Severity

Medium

Classification

CVE-2014-3609 CWE-20