MDVSA-2013:013 -- Mandriva squidID: oval:org.secpod.oval:def:1300159 | Date: (C)2013-03-22 (M)2023-02-20 |
Class: PATCH | Family: unix |
Multiple vulnerabilities has been found and corrected in squid : Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service via invalid Content-Length headers, long POST requests, or crafted authentication credentials . cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a denial of service via a crafted request. NOTE: this issue is due to an incorrect fix for CVE-2012-5643, possibly involving an incorrect order of arguments or incorrect comparison . The updated packages have been patched to correct these issues.
Platform: |
Mandriva Enterprise Server 5.2 |