tocsin

Debian/squid: high 8.6

mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smu

Action: Upgrade squid to 4.1-1 or later.

Affected

introducedfixedlast affected
04.1-1-

Fixed versions

4.1-1

Sources

published · modified · JSON