CVE-2014-3609

Name of the Vulnerable Software and Affected Versions Squid versions 3.x prior to 3.3.12 Squid versions 3.4.x prior to 3.4.6

Description The issue allows remote attackers to cause a denial of service, potentially leading to disruption of protected information availability. This can be achieved through a request containing specially crafted Range headers with unidentifiable byte-range values, affecting the HttpHdrRange.cc component in Squid.

Recommendations For Squid versions 3.x prior to 3.3.12, update to version 3.3.12 or later. For Squid versions 3.4.x prior to 3.4.6, update to version 3.4.6 or later. As a temporary workaround, consider restricting access to the HttpHdrRange.cc component to minimize the risk of exploitation.