Null pointer dereference

This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-20180318. Authentication is not required to exploit this vulnerability. The specific flaw exists within ClientRequestContext::sslBumpAccessCheck. A crafted request...

CVE-2018-1172

CVE-2018-1172 affects The Squid Software Foundation’s Squid proxy (notably versions around 3.5.27-20180318). The flaw is in ClientRequestContext::sslBumpAccessCheck; a crafted request can dereference a null pointer, enabling remote attackers to cause a denial-of-service with no authentication req...

CVE-2018-1172

This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-20180318. Authentication is not required to exploit this vulnerability. The specific flaw exists within ClientRequestContext::sslBumpAccessCheck. A crafted request...