CVE-2012-5643 in Squid Proxy
Summary
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.
Reservation
10/24/2012
Disclosure
12/20/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7183 | Squid Proxy tools/cachemgr.cc cachemgr.cgi input validation | 20 | Proof-of-Concept | Official fix | CVE-2012-5643 |