Unscored severity · published Jul 28, 2009
CVE-2009-2622
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol…
–
CVSS
56.9%
EPSS
No
On KEV
Description
Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.
Exploitation
Is it being used?
Exploit prediction (EPSS)56.9% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SQ
Squid · Squid-cache
3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +23 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-2622
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-2622
secunia.com
http://secunia.com/advisories/36007
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2009:161
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2009:178
www.securityfocus.com
http://www.securityfocus.com/bid/35812
www.securitytracker.com
http://www.securitytracker.com/id?1022607
Vendor Advisory
http://www.squid-cache.org/Advisories/SQUID-2009_2.txt
More from Squid
9.8
CVE-2025-54574
Squid is a caching proxy for the Web
9.8
CVE-2020-11945
An issue was discovered in Squid before 5.0.2
9.8
CVE-2019-12519
An issue was discovered in Squid through 4.7
9.8
CVE-2019-12524
An issue was discovered in Squid through 4.7
9.8
CVE-2019-12526
An issue was discovered in Squid before 4.9