Description
http.cc in Squid 4.x before 4.0.7 relies on the HTTP status code after a response-parsing failure, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a malformed response.
Remediation
References
Related Vulnerabilities
WordPress Plugin Custom Content Type Manager Backdoor (0.9.8.8)
WordPress Plugin CMS Tree Page View Security Bypass (1.3.4)
MySQL CVE-2018-3061 Vulnerability (CVE-2018-3061)
Zikula Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-4729)
Squid Improper Encoding or Escaping of Output Vulnerability (CVE-2021-31806)