CVE-2009-2622
NoneCVSS
—
EPSS
56.9%
Published
Jul 28, 2009
CISA due date
—
The record
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:4.0 | squid | 0 | <not-affected> |
| Debian:5.0 | squid3 | 0 | 3.0.STABLE8-3+lenny1 |
| Debian:5.0 | squid3 | 0 | 3.0.STABLE-3+lenny2 |
Related vulnerabilities
- CVE-2010-0308 lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows… Also affects squid
- CVE-2009-2855 The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers… Also affects squid
- CVE-2009-2621 Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer… Also affects squid
- CVE-2007-6239 The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and… Also affects squid
- CVE-2011-3205 Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in… Also affects squid3
- CVE-2010-3072 The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before… Also affects squid3
- CVE-2026-113786 pypdf is a free and open-source pure-python PDF library. CWE-20
- CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. CWE-20