Lucene search

Ubuntu.comUB:CVE-2009-2622

HistoryJul 28, 2009 - 12:00 a.m.

CVE-2009-2622

2009-07-2800:00:00

ubuntu.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.947 High

EPSS

Percentile

99.3%

JSON

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote
attackers to cause a denial of service via malformed requests including (1)
“missing or mismatched protocol identifier,” (2) missing or negative status
value," (3) “missing version,” or (4) “missing or invalid status number,”
related to (a) HttpMsg.cc and (b) HttpReply.cc.

OSVersionArchitecturePackageVersionFilename
ubuntu9.04noarchsquid3< 3.0.STABLE8-3+lenny2build0.9.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	9.04	noarch	squid3	< 3.0.STABLE8-3+lenny2build0.9.04.1	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2009-2622

nvd.nist.gov/vuln/detail/CVE-2009-2622

security-tracker.debian.org/tracker/CVE-2009-2622

www.cve.org/CVERecord?id=CVE-2009-2622

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.947 High

EPSS

Percentile

99.3%

JSON

Related for UB:CVE-2009-2622