Denial of Service Vulnerability in Squid Proxy Server by Squid Software
CVE-2021-31808

6.5MEDIUM

Key Information:

Vendor: Squid-cache
Status: Squid
Vendor: CVE Published:; 27 May 2021

🔔 Create Squid-cache Vulnerability Alert

What is CVE-2021-31808?

A significant vulnerability exists in Squid Proxy Server versions prior to 4.15 and 5.x prior to 5.0.6 due to an input-validation flaw that permits a Denial of Service (DoS) attack. This issue arises when a client sends a specially crafted HTTP Range request, potentially disrupting service for clients using the proxy. Administrators are advised to update their Squid installations to mitigate the risks associated with this vulnerability.