NVD

Id
46746  
Name
CVE-2012-5643  
Description
Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-12-20  
Modified Date
2016-11-28  
Seq
2012-5643  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234186 46746 CVE-2012-5643 SUSE-SU-2016:1996  View
234187 46746 CVE-2012-5643 SUSE-SU-2016:2089  View
234188 46746 CVE-2012-5643 openSUSE-SU-2013:0162  View
234189 46746 CVE-2012-5643 openSUSE-SU-2013:0186  View
234190 46746 CVE-2012-5643 openSUSE-SU-2013:1436  View
234191 46746 CVE-2012-5643 openSUSE-SU-2013:1443  View
234192 46746 CVE-2012-5643 [oss-security] 20121217 Re: CVE Request -- SQUID-2012:1 / Squid: DoS (excessive resource consumption) via invalid Content-Length headers or via memory leaks  View
234193 46746 CVE-2012-5643 RHSA-2013:0505  View
234194 46746 CVE-2012-5643 USN-1713-1  View
234195 46746 CVE-2012-5643 DSA-2631  View
234196 46746 CVE-2012-5643 MDVSA-2013:129  View
234197 46746 CVE-2012-5643 1027890  View
234198 46746 CVE-2012-5643 http://www.squid-cache.org/Advisories/SQUID-2012_1.txt  View
234199 46746 CVE-2012-5643 http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10479.patch  View
234200 46746 CVE-2012-5643 http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11714.patch  View
234201 46746 CVE-2012-5643 https://bugs.gentoo.org/show_bug.cgi?id=447596  View
234202 46746 CVE-2012-5643 https://bugzilla.redhat.com/show_bug.cgi?id=887962  View
234203 46746 CVE-2012-5643 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0368  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30064 JVNDB-2012-005771 Squid の cachemgr.cgi におけるサービス運用妨害 (メモリ消費) の脆弱性 Squid の cachemgr.cgi 内の tools/cachemgr.cc には、メモリリークにより、サービス運用妨害 (メモリ消費) 状態となる脆弱性が存在します。 CVE-2012-5643 58881 CVE-2012-5643 46746 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005771.html 2012-12-17 2016-02-16 View