Approved changes feed: RSS · Atom

cpe:2.3:a:squid:squid:2.7.stable5:*:*:*:*:*:*:*

part: a version: 2.7.stable5 update: *

VendorSquid (9786aba4-bb5c-533f-8bac-ba68903a8677)
ProductSquid (64869af5-807b-5058-9ba3-08565b79d416)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/squid-cache/squid purl2cpe 2026-06-01 10:16:52.985150
pkg:gitlab/redhat/squid purl2cpe 2026-06-01 10:16:52.985158

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0478 vulnerable 2026-06-08 04:51:09.582684 Details available
Squid 2.7 to 2.7.STABLE5, 3.0 to 3.0.STABLE12, and 3.1 to 3.1.0.4 allows remote attackers to cause a denial of service via an HTTP request with an invalid version number, which triggers a reachable assertion in (1) HttpMsg.c and (2) HttpStatusLine.c.
Published: 2009-02-08T22:00:00.000Z
Updated: 2024-08-07T04:31:26.320Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.