Main
Vulnerability Database
Exploits
ID:4093 - Exploit for Input validation error in Squid and Opensuse - CVE-2013-4123
ID:4093 - Exploit for Input validation error in Squid and Opensuse - CVE-2013-4123
Published: August 11, 2020
Vulnerability identifier: #VU42563
Vulnerability risk: Medium
CVE-ID: CVE-2013-4123
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Squid
Opensuse
Squid
Opensuse
Link to public exploit:
Vulnerability description
The vulnerability allows a remote client to perform service disruption.
The vulnerability exists due to incorrect handling of HTTP requests in client_side_request.cc. A remote client can supply a crafted port number in a HTTP Host header and crash the server.
Remediation
Install update from vendor's website.