CVE-2009-2621
NoneCVSS
—
EPSS
23.0%
Published
Jul 28, 2009
CISA due date
—
The record
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:4.0 | squid | 0 | <not-affected> |
| Debian:5.0 | squid3 | 0 | 3.0.STABLE8-3+lenny1 |
| Debian:5.0 | squid3 | 0 | 3.0.STABLE-3+lenny2 |
Related vulnerabilities
- CVE-2010-0308 lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows… Also affects squid
- CVE-2009-2855 The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers… Also affects squid
- CVE-2009-2622 Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause… Also affects squid
- CVE-2007-6239 The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and… Also affects squid
- CVE-2011-3205 Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in… Also affects squid3
- CVE-2010-3072 The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before… Also affects squid3
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119