squid -- remote DoS in HTTP response processingentered 2016-02-24
no CVE referenced
CVE details
CVE-2016-2570
The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service (assertion failure and daemon exit) via a crafted XML document, related to esi/CustomParser.cc and esi/CustomParser.h.
- Score
- 7.5 high
- Published
- 2016-02-27
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.