6.5
CVE-2021-31807
- EPSS 44.29%
- Published 08.06.2021 20:15:09
- Last modified 21.11.2024 06:06:15
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent.
Data is provided by the National Vulnerability Database (NVD)
Squid-cache ≫ Squid Version >= 3.0 < 4.15
Squid-cache ≫ Squid Version >= 5.0 < 5.0.6
Squid-cache ≫ Squid Version2.5.stable2
Squid-cache ≫ Squid Version2.5.stable3
Squid-cache ≫ Squid Version2.5.stable4
Squid-cache ≫ Squid Version2.5.stable5
Squid-cache ≫ Squid Version2.5.stable6
Squid-cache ≫ Squid Version2.5.stable7
Squid-cache ≫ Squid Version2.5.stable8
Squid-cache ≫ Squid Version2.5.stable9
Squid-cache ≫ Squid Version2.5.stable10
Squid-cache ≫ Squid Version2.5.stable11
Squid-cache ≫ Squid Version2.5.stable12
Squid-cache ≫ Squid Version2.5.stable13
Squid-cache ≫ Squid Version2.5.stable14
Squid-cache ≫ Squid Version2.6
Squid-cache ≫ Squid Version2.7 Update-
Squid-cache ≫ Squid Version2.7 Updatestable2
Squid-cache ≫ Squid Version2.7 Updatestable3
Squid-cache ≫ Squid Version2.7 Updatestable4
Squid-cache ≫ Squid Version2.7 Updatestable5
Squid-cache ≫ Squid Version2.7 Updatestable6
Squid-cache ≫ Squid Version2.7 Updatestable7
Squid-cache ≫ Squid Version2.7 Updatestable8
Squid-cache ≫ Squid Version2.7 Updatestable9
Fedoraproject ≫ Fedora Version33
Fedoraproject ≫ Fedora Version34
Netapp ≫ Cloud Manager Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 44.29% | 0.975 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:N/A:P
|
CWE-190 Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.