Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade squid | Dec 1, 2016 | Dec 20, 2012 |
| Debian | — | Upgrade squid | Jul 30, 2024 | Dec 20, 2012 |
| Freebsd | — | Upgrade squid | Dec 10, 2025 | Dec 28, 2012 |
| Gentoo Linux | — | Upgrade net-proxy/squid. | Oct 30, 2017 | Dec 20, 2012 |
| Oracle Solaris | — | Upgrade web/proxy/squid to version 3.1.23-0.175.1.8.0.3.0 on Solaris 11.1 | May 29, 2017 | Dec 20, 2012 |
| Oracle_linux | — | Upgrade squid | Oct 16, 2024 | Dec 20, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 17, 2012 |
| Suse | — | Upgrade squidUpgrade squid3 | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade squid-cgi | Nov 8, 2024 | Dec 20, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub