icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons_061

Squid < 3.0STABLE24 HTCP Request Denial of Service

Medium

Synopsis

The remote host is vulnerable to a Denial of Service (DoS) attack.

Description

According to its banner, the version of Squid proxy caching server installed on the remote host is 2.x or 3.0.x earlier than 3.0.STABLE24. Such versions are potentially affected by a denial-of-service vulnerability due to incorrect processing of specially crafted HTCP packets.

Solution

Either upgrade to Squid version 3.0.STABLE24 or later, or apply the patch referenced in the project's advisory above.