Main
Vulnerability Database
Exploits
ID:4093 - Exploit for Input validation error in Squid and Opensuse - CVE-2013-4123
ID:4093 - Exploit for Input validation error in Squid and Opensuse - CVE-2013-4123
Published: August 11, 2020
Vulnerability identifier: #VU42563
Vulnerability risk: Medium
CVE-ID: CVE-2013-4123
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Squid
Opensuse
Squid
Opensuse
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.
Remediation
Install update from vendor's website.