tocsin

Debian/squid: unknown

CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response.

Action: Upgrade squid to 4.1-1 or later.

Affected

introducedfixedlast affected
04.1-1-

Fixed versions

4.1-1

Sources

published · modified · JSON