Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2018-1172 PUBLISHED CVSS 5.900000095367432 MEDIUM

This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-20180318. Authentication is not required to exploit this vulnerability. The specific flaw exists within ClientRequestContext::sslBumpAccessCheck(). A crafted request can trigger the dereference of a null pointer. An attacker can leverage this vulnerability to create a denial-of-service condition to users of the system. Was ZDI-CAN-6088.

Risk Scores

CVSS v3.0
5.900000095367432
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.14squid0, 2.7.6-r0, 2.7.6-r10
Alpine:v3.20squid3.3.9-r0, 0, 2.7.6-r0
Alpine:v3.21squid3.5.8-r0, 3.5.7-r0, 3.5.6-r1
Alpine:v3.13squid2.7.6-r1, 0, 2.7.6-r0
Alpine:v3.23squid3.5.8-r0, 2.7.6-r0, 2.7.6-r1
Alpine:v3.12squid2.7.6-r0, 2.7.6-r1, 3.5.7-r0
Alpine:v3.18squid3.5.19-r1, 0, 3.5.8-r0
Alpine:v3.8squid3.5.8-r0, 2.7.6-r0, 2.7.6-r1
Alpine:v3.19squid3.5.8-r0, 0, 2.7.6-r0
Alpine:v3.22squid2.7.6-r0, 2.7.6-r1, 2.7.6-r10
Alpine:v3.11squid0, 2.7.6-r0, 2.7.6-r10
Alpine:v3.10squid3.5.7-r0, 0, 2.7.6-r0
Alpine:v3.16squid3.5.8-r0, 0, 2.7.6-r0
Alpine:v3.15squid3.5.8-r0, 3.5.7-r0, 3.5.6-r1
Alpine:v3.9squid3.5.8-r0, 2.7.6-r0, 2.7.6-r1
Alpine:v3.17squid3.5.8-r0, 0, 2.7.6-r0

Timeline

References

Open in Interactive Console →