CVE-2013-1839

Published: Sep 30, 2013Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a "," character in an Accept-Language header.

Affected (32)

Products: Squid Cache: Squid

Squid Cache

1 product

Squid

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Squid Cache Squid	Version 3.2.0.10
Squid Cache Squid	Version 3.2.0.11
Squid Cache Squid	Version 3.2.0.12
Squid Cache Squid	Version 3.2.0.13
Squid Cache Squid	Version 3.2.0.14
Squid Cache Squid	Version 3.2.0.15
Squid Cache Squid	Version 3.2.0.16
Squid Cache Squid	Version 3.2.0.17
Squid Cache Squid	Version 3.2.0.18
Squid Cache Squid	Version 3.2.0.19
Squid Cache Squid	Version 3.2.0.1
Squid Cache Squid	Version 3.2.0.2
Squid Cache Squid	Version 3.2.0.3
Squid Cache Squid	Version 3.2.0.4
Squid Cache Squid	Version 3.2.0.5
Squid Cache Squid	Version 3.2.0.6
Squid Cache Squid	Version 3.2.0.7
Squid Cache Squid	Version 3.2.0.8
Squid Cache Squid	Version 3.2.0.9
Squid Cache Squid	Version 3.2.1
Squid Cache Squid	Version 3.2.2
Squid Cache Squid	Version 3.2.3
Squid Cache Squid	Version 3.2.4
Squid Cache Squid	Version 3.2.5
Squid Cache Squid	Version 3.2.6
Squid Cache Squid	Version 3.2.7
Squid Cache Squid	Version 3.2.8
Squid Cache Squid	Version 3.3.0.2
Squid Cache Squid	Version 3.3.0.3
Squid Cache Squid	Version 3.3.0
Squid Cache Squid	Version 3.3.1
Squid Cache Squid	Version 3.3.2