squid: denial of service
| Package(s): | squid | CVE #(s): | CVE-2014-0128 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Created: | April 2, 2014 | Updated: | June 10, 2014 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Description: | From the Red Hat bugzilla:
A denial of service flaw was found in Squid when SSL-Bump was used. When SSL-Bump is enabled, an attacker could send crafted requests that would cause Squid to crash with an assertion. This issue affects versions 3.1 and later. Versions 3.0 and older, and version 2, are not vulnerable. The issue was fixed in versions 3.3.12 and 3.4.4. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||