Lucene search
HistorySep 30, 2013 - 10:55 p.m.
CVE-2013-1839
cve-2013-1839
squid
denial of service
infinite loop
cpu consumption
remote attackers
security vulnerability
nvd
6.3 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.902 High
EPSS
Percentile
98.8%
The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a “,” character in an Accept-Language header.
Related
checkpoint_advisories
checkpoint_advisories
Squid Proxy strHdrAcptLangGetItem Value Denial of Service (CVE-2013-1839)
2013-06-30 00:00:00
debiancve
debiancve
CVE-2013-1839
2013-09-30 22:55:00
ubuntucve
ubuntucve
CVE-2013-1839
2013-09-30 00:00:00
nessus
nessus
Fedora 18 : squid-3.2.9-1.fc18 (2013-4050)
2013-04-07 00:00:00
Squid 3.x < 3.2.9 / 3.3.3 strHdrAcptLangGetItem Malformed Accept-Language Denial of Service
2013-03-18 00:00:00
Fedora 17 : squid-3.2.9-1.fc17 (2013-4063)
2013-04-07 00:00:00
prion
prion
Design/Logic Flaw
2013-09-30 22:55:00
openvas
openvas
Squid Proxy Accept-Language Header Denial Of Service Vulnerability
2013-10-03 00:00:00
Fedora Update for squid FEDORA-2013-4050
2013-04-08 00:00:00
Fedora Update for squid FEDORA-2013-4050
2013-04-08 00:00:00
securityvulns
securityvulns
Squid security vulnerabilities
2013-03-10 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: squid-3.2.9-1.fc18
2013-04-05 23:09:37
[SECURITY] Fedora 17 Update: squid-3.2.9-1.fc17
2013-04-05 23:00:38
[SECURITY] Fedora 18 Update: squid-3.2.13-1.fc18
2013-08-02 21:53:16
gentoo
gentoo
Squid: Multiple vulnerabilities
2013-09-27 00:00:00
6.3 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.902 High
EPSS
Percentile
98.8%
Related for CVE-2013-1839