Intrusion PreventionSquid.HTTP.Response.Processing.DoS
Description
This indicates an attempt to exploit a Denial of Service vulnerability in Squid.
The vulnerability is due to input validation when the vulnerable software handles a malformed packet. A remote attacker may be able to exploit this to cause a denial of service condition on the affected system, via crafted packets.
Affected Products
Squid Project Squid 3.2.x and prior
Squid Project Squid 3.3.x
Squid Project Squid 3.4.x
Squid Project Squid 3.5.x prior to 3.5.16
Squid Project Squid 4.0.x prior to 4.0.8
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://www.squid-cache.org/Advisories/SQUID-2016_4.txt
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 42364 |
| Created | May 05, 2016 |
| Updated | Sep 28, 2022 |
| Risk |
|
| CVE ID | CVE-2016-3948 |
| Exploit Prediction Score | 5.97% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris |
| Affected App | Other |