CVE-2012-5643
EPSS 33.2%squid3 - denial of service
Published: 12/20/2012Modified: 4/28/2026
Description
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.
Affected packages (2)
- Debian/squidfrom 0, < 2.7.STABLE9-2
- Debian/squid3from 0, < 3.1.6-1.2+squeeze3