Unrated severityNVD Advisory· Published Aug 18, 2009· Updated Jun 16, 2026
CVE-2009-2855
CVE-2009-2855
Description
The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:squid-cache:squid:2.7:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:squid-cache:squid:2.7:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:2.7:stable3:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:2.7:stable4:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
12- www.squid-cache.org/bugs/show_bug.cginvdVendor Advisory
- bugs.debian.org/cgi-bin/bugreport.cginvd
- bugs.debian.org/cgi-bin/bugreport.cginvd
- www.openwall.com/lists/oss-security/2009/07/20/10nvd
- www.openwall.com/lists/oss-security/2009/08/03/3nvd
- www.openwall.com/lists/oss-security/2009/08/04/6nvd
- www.securityfocus.com/bid/36091nvd
- www.securitytracker.com/idnvd
- www.squid-cache.org/bugs/show_bug.cginvd
- bugzilla.redhat.com/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/52610nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10592nvd
News mentions
0No linked articles in our index yet.