EUVD-2012-3457

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

SquidClamav 5.x < 5.8 and 6.x < 6.7 vulnerable to denial of service via unescaped URL in command call

Reporter	Title	Published	Views	Family All 16
FreeBSD	squidclamav -- Denial of Service	24 Jul 201200:00	–	freebsd
CVE	CVE-2012-3501	25 Aug 201210:00	–	cve
Cvelist	CVE-2012-3501	25 Aug 201210:00	–	cvelist
Tenable Nessus	FreeBSD : squidclamav -- Denial of Service (8defa0f9-ee8a-11e1-8bd8-0022156e8794)	27 Aug 201200:00	–	nessus
Tenable Nessus	GLSA-201209-08 : SquidClamav: Denial of Service	25 Sep 201200:00	–	nessus
Tenable Nessus	SquidClamav Specially Crafted Character Parsing Remote DoS	10 Sep 201200:00	–	nessus
Gentoo Linux	SquidClamav: Denial of service	24 Sep 201200:00	–	gentoo
NVD	CVE-2012-3501	25 Aug 201210:29	–	nvd
OpenVAS	SquidClamav URL Parsing DoS Vulnerability	17 Sep 201200:00	–	openvas
OpenVAS	FreeBSD Ports: squidclamav	30 Aug 201200:00	–	openvas

[
  {
    "enisaIdVendor": [
      {
        "id": "64ee13ad-139a-3eab-a559-c7f1ae970ed2",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "cda04a20-dd97-3d4c-8686-b7c84cc182cc",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
squidclamav	www.squidclamav.darold.net/news.html
openwall	www.openwall.com/lists/oss-security/2012/08/16/4
osvdb	www.osvdb.org/84138
bugs	www.bugs.gentoo.org/show_bug.cgi
github	www.github.com/darold/squidclamav/commit/80f74451f628264d1d9a1f1c0bbcebc932ba5e00
openwall	www.openwall.com/lists/oss-security/2012/08/16/2
securityfocus	www.securityfocus.com/bid/54663
secunia	www.secunia.com/advisories/49057
freecode	www.freecode.com/projects/squidclamav/releases/346722
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25

EPSS0.0229