VDB
CVE-2009-2622
CVE-2009-2622
PUBLISHED
CVSS 5 MEDIUM
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.
EPSS 26.19% · 96.4th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
26.19%
96.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| squid-cache | squid | 3.0, 3.0, 3.0 |
Timeline
- Jul 28, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 2, 2022 CVE Updated
- May 20, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- 1022607 vdb
- http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch url
- 35812 vdb
- ADV-2009-2013 vdb
- 36007 third-party-advisory
- http://www.squid-cache.org/Advisories/SQUID-2009_2.txt url
- MDVSA-2009:161 vendor-advisory
- MDVSA-2009:178 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2009-2622 advisory