CVE-2013-4123
N/A
Published: September 16, 2013 at 07:00 PM UTC
Updated: June 16, 2026 at 11:56 PM UTC
3 products affected across 2 vendorsopenSUSESquidCache Squid
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 80%
Description
client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (6)
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-updates/2013-09/msg00024.htmlThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/54142x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://www.squid-cache.org/Advisories/SQUID-2013_3.txtx_refsource_CONFIRMPatch
Source: [email protected]
http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11826.patchx_refsource_CONFIRM
Source: [email protected]
http://www.squid-cache.org/Versions/v3/3.3/changesets/squid-3.3-12591.patchQuick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card