Red Hat Security AdvisoryRHSA-2014:1147
squid security update
Released 2014-09-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7) squid-7:3.3.8-12.el7_0
- Red Hat Enterprise Linux Server Optional (v. 7) squid-sysvinit-7:3.3.8-12.el7_0
- Red Hat Enterprise Linux Workstation (v. 7) squid-7:3.3.8-12.el7_0
- Red Hat Enterprise Linux Workstation Optional (v. 7) squid-sysvinit-7:3.3.8-12.el7_0
Fixes 1 record
Priority MEDIUM 56
HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values."
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.5622 · Published 2014-09-11 · Partial fix CWE-20
