This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-33620 →

DEBIAN-CVE-2021-33620

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response...

Original description

The description as published by the source.

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent by the server.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 squid

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-10"}]}]

Debian:13 squid

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-10"}]}]

Debian:14 squid

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-10"}]}]

References

advisory security-tracker.debian.org