fkie_cve-2012-5643
Vulnerability from fkie_nvd
Published
2012-12-20 12:02
Modified
2025-04-11 00:51
Severity ?
Summary
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:squid-cache:squid:2.0:*:*:*:*:*:*:*", matchCriteriaId: "B7EB3DBC-313E-4F55-90F3-BED0918A4EFE", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:2.1:*:*:*:*:*:*:*", matchCriteriaId: "C3DCC264-510E-43D1-9C13-99CEA54C7940", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:2.2:*:*:*:*:*:*:*", matchCriteriaId: "ED31C038-4142-4C2C-B540-9223C5C199FB", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:2.3:*:*:*:*:*:*:*", matchCriteriaId: "177060A9-6211-4B6D-96BE-48B4BD1FAFEE", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:2.4:*:*:*:*:*:*:*", matchCriteriaId: "A7E210DD-8EE6-4182-A78E-F791FCFDEFCF", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:2.5:*:*:*:*:*:*:*", matchCriteriaId: "50327E36-756E-434D-804D-1E44A4ABAE1F", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:2.6:*:*:*:*:*:*:*", matchCriteriaId: "3AE100C3-0245-4305-B514-77D0572C2947", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:2.7:*:*:*:*:*:*:*", matchCriteriaId: "35C30CB9-FA3A-408D-A8B0-8805E75657BE", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:2.7:stable3:*:*:*:*:*:*", matchCriteriaId: "A03692DD-779F-4E3C-861C-29943870A816", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:2.7:stable4:*:*:*:*:*:*", matchCriteriaId: "79FF6B3C-A3CE-4AA2-80F9-44D05A6B2F08", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:squid-cache:squid:3.0:*:*:*:*:*:*:*", matchCriteriaId: "62B9F669-6217-498A-902E-22EDEEFC565E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0:-:pre1:*:*:*:*:*", matchCriteriaId: "ED54A2B3-6D36-4016-9BF1-83FAD500103F", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0:-:pre2:*:*:*:*:*", matchCriteriaId: "C4F368E3-88A6-463C-AA18-8FA1B9E35A84", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0:-:pre3:*:*:*:*:*", matchCriteriaId: "1451771E-F456-4631-89C8-0A49F4C8F03B", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0:-:pre4:*:*:*:*:*", matchCriteriaId: "FC881283-D0DF-482E-8A06-5CFCF0FA0BB6", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0:-:pre5:*:*:*:*:*", matchCriteriaId: "E746946A-2D07-402B-A071-9B674F6FEA75", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0:-:pre6:*:*:*:*:*", matchCriteriaId: "6B1A697B-3777-492F-BA53-0BA7A9934C03", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0:-:pre7:*:*:*:*:*", matchCriteriaId: "1C579925-591E-4BD7-A888-B8D2B0228D34", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0:rc4:*:*:*:*:*:*", matchCriteriaId: "131C4C00-3811-42BF-A84A-EB2E5DA156B4", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable1:*:*:*:*:*:*:*", matchCriteriaId: "047EDDD6-02F5-4B53-8FCA-781962392080", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable2:*:*:*:*:*:*:*", matchCriteriaId: "01AD43AB-40BF-449F-A121-A8587E7AE449", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable3:*:*:*:*:*:*:*", matchCriteriaId: "3942285D-E20C-45C5-9EF8-821F6D782CB8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable4:*:*:*:*:*:*:*", matchCriteriaId: "B3FDB45B-4D91-4427-9565-812919086E7E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable5:*:*:*:*:*:*:*", matchCriteriaId: "86C3C8B5-C2A3-4454-9F89-38A860278366", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable6:*:*:*:*:*:*:*", matchCriteriaId: "8B37B7B4-2EAC-4C2A-9526-5C62CBA1DB8B", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable7:*:*:*:*:*:*:*", matchCriteriaId: "056EDEEE-A09C-47A2-9217-72E4B8387E00", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable8:*:*:*:*:*:*:*", matchCriteriaId: "2593CB12-03E2-4F98-9B89-C09D5EADE077", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable9:*:*:*:*:*:*:*", matchCriteriaId: "A44B7A4F-3070-4092-B9AF-3A1CD0897CC7", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable10:*:*:*:*:*:*:*", matchCriteriaId: "EF79D9A9-9C11-4E6D-81D1-32CA8CA95223", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable11:*:*:*:*:*:*:*", matchCriteriaId: "042FE60B-7239-45C7-8EE3-A036AC7778F8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable11:rc1:*:*:*:*:*:*", matchCriteriaId: "FF5EE89A-720F-456A-BD26-FE46BBA29D9A", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable12:*:*:*:*:*:*:*", matchCriteriaId: "ADF61A74-9CF9-413E-B997-4FAE5BA28939", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable13:*:*:*:*:*:*:*", matchCriteriaId: "5605B00F-438B-45CC-A55D-E75E57BC4684", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable14:*:*:*:*:*:*:*", matchCriteriaId: "8316B22E-B016-4F0E-9A3F-383E9B1A85A4", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable15:*:*:*:*:*:*:*", matchCriteriaId: "49A2C5CB-E2F1-4A72-9EA3-912050AFEF7F", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable16:*:*:*:*:*:*:*", matchCriteriaId: "574C7DCC-B6E5-42A0-AA44-A0BCD67D1884", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable16:rc1:*:*:*:*:*:*", matchCriteriaId: "4D0DAD04-02C4-4FC4-BE08-3CAA3B85EB0B", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable17:*:*:*:*:*:*:*", matchCriteriaId: "A2B1F1A5-B435-4A5C-86DF-EC3F29D94417", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable18:*:*:*:*:*:*:*", matchCriteriaId: "113EF7A6-3B8D-4A50-8873-FD36FCBF284C", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable19:*:*:*:*:*:*:*", matchCriteriaId: "DC97E2DA-7378-486B-9178-3B38FF58589B", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable20:*:*:*:*:*:*:*", matchCriteriaId: "1F178890-2F7E-43F5-8D6D-5EFCD790E758", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable21:*:*:*:*:*:*:*", matchCriteriaId: "9FA231EB-0F06-4D13-B50D-76FC8393187A", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable22:*:*:*:*:*:*:*", matchCriteriaId: "31AB1D33-65EE-46DF-9D29-6B2BFACE7EC8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable23:*:*:*:*:*:*:*", matchCriteriaId: "BDA4744F-5FB2-4DF8-A7B9-A33EAB004CBA", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable24:*:*:*:*:*:*:*", matchCriteriaId: "72023FB9-F081-4F0A-9E81-2AF0470EB278", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.0.stable25:*:*:*:*:*:*:*", matchCriteriaId: "2F7D973B-9D57-4F74-89B1-A18CDA388EF4", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*", matchCriteriaId: "6A8586AD-E820-4BAE-AAF9-AC7EF2316C06", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*", matchCriteriaId: "802E3D2B-90B7-4725-854F-4174116BC314", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*", matchCriteriaId: "7501697A-BCFD-4DC3-8D87-CC9A186D9589", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*", matchCriteriaId: "0D6C4455-85F4-462D-9FF6-F830ED7D398E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*", matchCriteriaId: "B600BF4C-8169-4086-BFE6-F066BE5F5406", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*", matchCriteriaId: "46272D1B-1468-48C0-B37A-7D06FAC39C47", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*", matchCriteriaId: "DA782B4B-486F-4197-BD5D-ABF791D57211", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*", matchCriteriaId: "558D8641-E097-4D91-9B6E-07433844BB82", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*", matchCriteriaId: "0B46F5F1-38FC-4E25-8F04-CA2730561DF8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*", matchCriteriaId: "C69B0A4D-9619-4BEA-A846-C4438C2660F2", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*", matchCriteriaId: "ED17FE35-6B2C-41BF-A7C7-2EECBDB5A934", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*", matchCriteriaId: "78A50750-3A31-482C-B95C-019C8934850E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*", matchCriteriaId: "8FF6AC30-9570-4D4B-835E-CCADEB546F46", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*", matchCriteriaId: "7FB84E4E-6A0A-41C8-9DDF-3C18F526F155", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*", matchCriteriaId: "2E49E5C3-D01F-4DBC-B33A-5495D3EC44F8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*", matchCriteriaId: "79C53B22-9F33-43E7-8D1F-EEB0DEF4B503", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.16:*:*:*:*:*:*:*", matchCriteriaId: "25B60DB2-F50C-42F0-B6C9-B25C34B8F578", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.17:*:*:*:*:*:*:*", matchCriteriaId: "DE973F9E-8387-464F-AFA0-25215B340173", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.0.18:*:*:*:*:*:*:*", matchCriteriaId: "03D3F0E3-0C50-4A86-87F4-90FC82B312F5", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.1:*:*:*:*:*:*:*", matchCriteriaId: "CE26BEC0-B9C7-43F0-B0FB-E81870170B29", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.2:*:*:*:*:*:*:*", matchCriteriaId: "D0778579-A193-4C61-BB1A-6D2E733F3958", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.10:*:*:*:*:*:*:*", matchCriteriaId: "AE9A3716-8670-4847-A6EB-F601184D369E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.11:*:*:*:*:*:*:*", matchCriteriaId: "D0E88EE3-EC00-4F1F-BAEF-4F1F893C5C5F", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.12:*:*:*:*:*:*:*", matchCriteriaId: "A330DFA8-BF79-45CC-BF88-6CEA26D7BC9E", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.13:*:*:*:*:*:*:*", matchCriteriaId: "679A55F8-34B4-435A-8BCE-8F842F3FB269", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.14:*:*:*:*:*:*:*", matchCriteriaId: "898674F9-6BF7-469F-A74E-558EAFC2CD27", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.15:*:*:*:*:*:*:*", matchCriteriaId: "3F50E718-1CF2-4C8F-A1EA-5F769B203B8A", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.16:*:*:*:*:*:*:*", matchCriteriaId: "290D66F4-D27F-4E86-AC95-05082F3C2E36", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.17:*:*:*:*:*:*:*", matchCriteriaId: "A8CD6A42-2C79-48EB-8F6C-0A7CE0C6AAAA", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.18:*:*:*:*:*:*:*", matchCriteriaId: "ABBA9A61-2B05-4527-A49D-425AD5FD863B", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.19:*:*:*:*:*:*:*", matchCriteriaId: "E893D7A8-9C39-438C-8EF2-9573EEDC884A", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.20:*:*:*:*:*:*:*", matchCriteriaId: "0B707451-BF0E-4F79-A348-B1141ABA6EF8", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.1.21:*:*:*:*:*:*:*", matchCriteriaId: "810AAA9D-F4B2-4F0A-89DD-2D9378516481", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.1:*:*:*:*:*:*:*", matchCriteriaId: "6DFAB3BA-BBE9-4CFB-BE6B-BDF3E7772E7F", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.2:*:*:*:*:*:*:*", matchCriteriaId: "C9F523B8-463E-4FB0-ACB6-E36AAAF85CD9", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.3:*:*:*:*:*:*:*", matchCriteriaId: "5BA593D9-907D-4051-A3F2-0F88F01A7C79", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.4:*:*:*:*:*:*:*", matchCriteriaId: "20D2B364-B98A-4484-A10A-86AF43774096", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.5:*:*:*:*:*:*:*", matchCriteriaId: "0B7BF076-0D43-407A-86DC-D1163922A787", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.6:*:*:*:*:*:*:*", matchCriteriaId: "AA576F49-A7F5-4013-89DF-F6C91C15B547", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.7:*:*:*:*:*:*:*", matchCriteriaId: "5D3F52FE-FFB3-4221-8DC7-3F5680A07429", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.8:*:*:*:*:*:*:*", matchCriteriaId: "604FEF42-ABA7-42C1-8A5F-C3AECFD68481", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.9:*:*:*:*:*:*:*", matchCriteriaId: "DC2568C1-89CB-41C1-9126-A8665614D0B1", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.10:*:*:*:*:*:*:*", matchCriteriaId: "C18B5392-3FDB-49E6-89DB-7945D337FBFB", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.11:*:*:*:*:*:*:*", matchCriteriaId: "BA9E0E7F-E93C-4DE9-8D91-5EE50BCFAC2A", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.12:*:*:*:*:*:*:*", matchCriteriaId: "0BFF9D8B-343B-415D-8AF8-B07AF94CC48B", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.13:*:*:*:*:*:*:*", matchCriteriaId: "16F5794B-BBFB-4B12-9A0B-88A0334681C7", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.14:*:*:*:*:*:*:*", matchCriteriaId: "17D0083E-8D50-4DC6-979F-685D5CB588AF", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.15:*:*:*:*:*:*:*", matchCriteriaId: "138FAD73-1D25-4F46-B9EA-599FF0EDA1AA", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.16:*:*:*:*:*:*:*", matchCriteriaId: "2CE34DC1-F654-474E-B6A3-D81B9BF4D6CF", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.17:*:*:*:*:*:*:*", matchCriteriaId: "8A4BF7AC-7D9F-40D8-A5AA-BE1EBF37CF96", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.18:*:*:*:*:*:*:*", matchCriteriaId: "643E8B9B-C3F4-4171-BF67-D9359BDCE5CB", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.0.19:*:*:*:*:*:*:*", matchCriteriaId: "A73CBC60-1EF1-4730-9350-EB51F269695B", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.1:*:*:*:*:*:*:*", matchCriteriaId: "2721E403-A553-492F-897F-1CD1E2685139", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.2:*:*:*:*:*:*:*", matchCriteriaId: "85B091C4-8104-4A1E-A09D-EBCD114DC829", vulnerable: true, }, { criteria: "cpe:2.3:a:squid-cache:squid:3.2.3:*:*:*:*:*:*:*", matchCriteriaId: "FA2EDF9C-45AD-4980-8DEF-C7F473B22CAF", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:squid-cache:squid:3.3.0.1:*:*:*:*:*:*:*", matchCriteriaId: "A7A83183-74B1-4041-A961-D9F382AAC7E5", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.", }, { lang: "es", value: "Varias fugas de memoria en tools/cachemgr.cc en cachemgr.cgi en Squid v2.x y v3.x antes de v3.1.22, v3.2.x antes de v3.2.4 y v3.3.x antes de v3.3.0.2 permite a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de (1) cabeceras Content-Length no válidas, (2) largas peticiones POST, o (3) credenciales de autenticación manipuladas.", }, ], id: "CVE-2012-5643", lastModified: "2025-04-11T00:51:21.963", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2012-12-20T12:02:19.840", references: [ { source: "secalert@redhat.com", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html", }, { source: "secalert@redhat.com", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html", }, { source: "secalert@redhat.com", url: "http://lists.opensuse.org/opensuse-updates/2013-01/msg00052.html", }, { source: "secalert@redhat.com", url: "http://lists.opensuse.org/opensuse-updates/2013-01/msg00075.html", }, { source: "secalert@redhat.com", url: "http://lists.opensuse.org/opensuse-updates/2013-09/msg00025.html", }, { source: "secalert@redhat.com", url: "http://lists.opensuse.org/opensuse-updates/2013-09/msg00032.html", }, { source: "secalert@redhat.com", url: "http://openwall.com/lists/oss-security/2012/12/17/4", }, { source: "secalert@redhat.com", url: "http://rhn.redhat.com/errata/RHSA-2013-0505.html", }, { source: "secalert@redhat.com", url: "http://secunia.com/advisories/52024", }, { source: "secalert@redhat.com", url: "http://secunia.com/advisories/54839", }, { source: "secalert@redhat.com", url: "http://ubuntu.com/usn/usn-1713-1", }, { source: "secalert@redhat.com", url: "http://www.debian.org/security/2013/dsa-2631", }, { source: "secalert@redhat.com", url: "http://www.mandriva.com/security/advisories?name=MDVSA-2013:129", }, { source: "secalert@redhat.com", url: "http://www.securitytracker.com/id?1027890", }, { source: "secalert@redhat.com", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.squid-cache.org/Advisories/SQUID-2012_1.txt", }, { source: "secalert@redhat.com", tags: [ "Patch", ], url: "http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10479.patch", }, { source: "secalert@redhat.com", tags: [ "Patch", ], url: "http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11714.patch", }, { source: "secalert@redhat.com", url: "https://bugs.gentoo.org/show_bug.cgi?id=447596", }, { source: "secalert@redhat.com", url: "https://bugzilla.redhat.com/show_bug.cgi?id=887962", }, { source: "secalert@redhat.com", url: "https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0368", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-updates/2013-01/msg00052.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-updates/2013-01/msg00075.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-updates/2013-09/msg00025.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-updates/2013-09/msg00032.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://openwall.com/lists/oss-security/2012/12/17/4", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://rhn.redhat.com/errata/RHSA-2013-0505.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/52024", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/54839", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://ubuntu.com/usn/usn-1713-1", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.debian.org/security/2013/dsa-2631", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.mandriva.com/security/advisories?name=MDVSA-2013:129", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securitytracker.com/id?1027890", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Vendor Advisory", ], url: "http://www.squid-cache.org/Advisories/SQUID-2012_1.txt", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", ], url: "http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10479.patch", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", ], url: "http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11714.patch", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://bugs.gentoo.org/show_bug.cgi?id=447596", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://bugzilla.redhat.com/show_bug.cgi?id=887962", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0368", }, ], sourceIdentifier: "secalert@redhat.com", vulnStatus: "Deferred", weaknesses: [ { description: [ { lang: "en", value: "CWE-20", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.