Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to a Denial of Service attack (against all clients using the proxy). A client sends an HTTP Range request to trigger this.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Squid 输入验证错误漏洞
Vulnerability Description
Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。 Squid 存在输入验证错误漏洞。该漏洞源于程序执行HTTP Range请求时对用户提供的输入的验证不足，远程代理客户端可以通过代理服务器发送特制的HTTP请求并导致拒绝服务攻击。以下产品及版本存在该漏洞：Squid: 2.5, 2.5.6, 2.5.9, 2.5.stable1, 2.5.stable2, 2.5.stable3, 2.5.stable4, 2.5.stable5, 2.5.stable6
CVSS Information
N/A
Vulnerability Type
N/A