---

CVE-2021-31806 - log back

CVE-2021-31806 edited at 20 May 2021 18:29:55
Severity	- Unknown + High
Remote	- Unknown + Remote
Type	- Unknown + Denial of service
Description	+ Due to an incorrect input validation bug Squid before version 4.15 is vulnerable to a denial of service attack against all clients using the proxy by a trusted client making HTTP Range requests.
References	+ https://github.com/squid-cache/squid/security/advisories/GHSA-pxwq-f3qr-w2xf + http://www.squid-cache.org/Versions/v4/changesets/squid-4-e7cf864f938f24eea8af0692c04d16790983c823.patch
Notes

CVE-2021-31806 created at 20 May 2021 18:26:45