Integer Overflow Issue in Squid Cache Affecting HTTP Range Requests
CVE-2021-31807
6.5MEDIUM
What is CVE-2021-31807?
An integer overflow vulnerability exists in Squid, allowing a remote server to trigger a Denial of Service (DoS) by manipulating responses to HTTP Range requests. This vulnerability is triggered by standard headers that may be present in HTTP traffic, often without any malicious intent. Admins are advised to update their Squid installations to mitigate potential disruptions caused by this issue.
References
EPSS Score
44% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved