CVEs-PoC/2021/CVE-2021-31808.md

CVE-2021-31808

Description

An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to a Denial of Service attack (against all clients using the proxy). A client sends an HTTP Range request to trigger this.

POC

Reference

No PoCs from references.

Github

• https://github.com/MegaManSec/Squid-Security-Audit