PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2014-3609

CVE-2014-3609

squid: assertion failure in Range header processing (SQUID-2014:2)

Loading…

Severity

Important

Red Hat Product Security

5

CVSS 2.0

Review impact separately from score.

Published · August 28, 2014

Updated · June 27, 2026

Description

A flaw was found in the way Squid handled malformed HTTP Range headers. A remote attacker able to send HTTP requests to the Squid proxy could use this flaw to crash Squid.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-617 · Reachable Assertion