VDB
CVE-2009-2622
CVE-2009-2622
PUBLISHED
CVSS 5 MEDIUM
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.
EPSS 56.91% · 99.0th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
56.91%
99.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| squid-cache | squid | 3.0, 3.0, 3.0 |
Timeline
- Jul 28, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
References
- http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch url
- 36007 third-party-advisory
- 1022607 vdb
- 35812 vdb
- ADV-2009-2013 vdb
- http://www.squid-cache.org/Advisories/SQUID-2009_2.txt url
- MDVSA-2009:161 vendor-advisory
- MDVSA-2009:178 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2009-2622 advisory