The Squid Software Foundation Squid vulnerabilities

1 known vulnerability affecting the_squid_software_foundation/the_squid_software_foundation_squid.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2018-1172MEDIUMCVSS 5.9v3.5.27-201803182018-05-16

CVE-2018-1172 [MEDIUM] CWE-476 CVE-2018-1172: This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-20180318. Authentication is not required to exploit this vulnerability. The specific flaw exists within ClientRequestContext::sslBumpAccessCheck(). A crafted request can trigger the dereference of a null pointer. An attac