Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2009-2622

Date: July 28, 2009

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.

Language: C

Severity Score

Related Resources (11)

https://people.canonical.com/~ubuntu-security/cve/CVE-2009-2622
http://secunia.com/advisories/36007
http://www.squid-cache.org/Versions/v3/3.1/changesets/b9661.patch
http://www.squid-cache.org/Advisories/SQUID-2009_2.txt
http://www.vupen.com/english/advisories/2009/2013
http://www.mandriva.com/security/advisories?name=MDVSA-2009:161
http://www.securitytracker.com/id?1022607
https://nvd.nist.gov/vuln/detail/CVE-2009-2622
http://www.securityfocus.com/bid/35812
http://www.mandriva.com/security/advisories?name=MDVSA-2009:178
https://www.mend.io/vulnerability-database/CVE-2009-2622

Severity Score

Weakness Type (CWE)

Improper Input Validation

CWE-20

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us