Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2021-28652 →

DEBIAN-CVE-2021-28652

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against th...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory leaks that. over time, lead to a Denial of Service via an unspecified short query string. This attack is limited to clients with Cache Manager API access privilege.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 squid

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-10"}]}]

Debian:13 squid

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-10"}]}]

Debian:14 squid

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-10"}]}]

Références

advisory security-tracker.debian.org