SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  Squid strListGetItem Function DoS

Category: WEB-ATTACKS      

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.


Relevant Information