CVE-2009-2855

2009-08-1800:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.965 High

EPSS

Percentile

99.6%

JSON

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows
remote attackers to cause a denial of service via a crafted auth header
with certain comma delimiters that trigger an infinite loop of calls to the
strcspn function.

Bugs

Notes

Author	Note
mdeslaur	reproducer in RH bug reproducer doesn’t work on 2.5 and 2.6, as code is different. don’t seem to be vulnerable.
micahg	http://packages.debian.org/changelogs/pool/main/s/squid3/current/changelog#version3.0.STABLE19-1 shows this CVE fixed, so marking as not-affected for lucid

OSVersionArchitecturePackageVersionFilename
ubuntu8.10noarchsquid< 2.7.STABLE3-1ubuntu2.2UNKNOWN
ubuntu9.04noarchsquid< 2.7.STABLE3-4.1ubuntu1.1UNKNOWN
ubuntu9.10noarchsquid< 2.7.STABLE6-2ubuntu2.1UNKNOWN
ubuntu9.04noarchsquid3< 3.0.STABLE8-3+lenny4build0.9.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.10	noarch	squid	< 2.7.STABLE3-1ubuntu2.2	UNKNOWN
ubuntu	9.04	noarch	squid	< 2.7.STABLE3-4.1ubuntu1.1	UNKNOWN
ubuntu	9.10	noarch	squid	< 2.7.STABLE6-2ubuntu2.1	UNKNOWN
ubuntu	9.04	noarch	squid3	< 3.0.STABLE8-3+lenny4build0.9.04.1	UNKNOWN