Unscored severity · published Sep 16, 2013
CVE-2013-4123
client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header
–
CVSS
80.5%
EPSS
No
On KEV
Description
client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.
Exploitation
Is it being used?
Exploit prediction (EPSS)80.5% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Opensuse · Opensuse
12.3 · source: NVD
SQ
Squid · Squid-cache
3.3.0; 3.3.0.2; 3.3.0.3; 3.3.1; 3.3.2; 3.3.3; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4123
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4123
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-09/msg00024.html
Vendor Advisory
http://secunia.com/advisories/54142
secunia.com
http://secunia.com/advisories/54834
Vendor Advisory
http://www.squid-cache.org/Advisories/SQUID-2013_3.txt
Patch
http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11826.patch
www.squid-cache.org
http://www.squid-cache.org/Versions/v3/3.3/changesets/squid-3.3-12591.patch
More from Opensuse
9.8
CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
9.8
CVE-2016-4117
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
9.8
CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
9.8
CVE-2015-5119
Adobe Flash Player Use-After-Free Vulnerability