Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2021-28652 PUBLISHED CVSS 4.900000095367432 MEDIUM

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory leaks that. over time, lead to a Denial of Service via an unspecified short query string. This attack is limited to clients with Cache Manager API access privilege.

Risk Scores

CVSS v3.1
4.900000095367432
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.20squid3.5.28-r0, 5.0.5-r0, 5.0.4-r1
Alpine:v3.22squid3.2.0.12-r4, 3.4.6-r1, 3.4.6-r0
Alpine:v3.11squid3.5.20-r0, 3.5.20-r1, 3.5.22-r0
Alpine:v3.18squid3.2.0.12-r3, 2.7.7-r0, 2.7.6-r9
Alpine:v3.23squid2.7.6-r5, 2.7.7-r0, 2.7.6-r9
Alpine:v3.15squid3.5.4-r0, 0, 2.7.6-r1
Alpine:v3.17squid3.2.0.12-r1, 3.2.0.12-r2, 3.2.0.12-r3
Alpine:v3.12squid3.3.5-r0, 2.7.6-r6, 0
Alpine:v3.21squid3.5.2-r1, 5.0.4-r1, 5.0.4-r0
Alpine:v3.19squid3.5.27-r1, 3.5.28-r0, 3.5.3-r0
Alpine:v3.16squid3.2.3-r0, 2.7.7-r2, 2.7.7-r4
Alpine:v3.14squid3.2.0.13-r0, 5.0.5-r0, 5.0.4-r1
Alpine:v3.10squid2.7.6-r0, 0, 4.8-r1
Alpine:v3.13squid3.5.15-r0, 3.5.14-r1, 3.5.14-r0

Timeline

References

Open in Interactive Console →