CVE-2015-0881

CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response.

Score

CVSS 2.0 4.3 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2015-02-20

Last modified

2024-08-06

Affected products

• Squid (Squid-cache)

References

• http://jvn.jp/en/jp/JVN64455813/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000019