CVE-2009-2622: Squid-Cache Squid

Medium severity, CVSS 5.0. EPSS: 56.9% chance of exploitation in the next 30 days.

Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause a denial of service via malformed requests including (1) "missing or mismatched protocol identifier," (2) missing or negative status value," (3) "missing version," or (4) "missing or invalid status number," related to (a) HttpMsg.cc and (b) HttpReply.cc.

Affected products

• Squid-Cache Squid: version 3.0 only; version 3.1 only; version 3.1.0.1 only; version 3.1.0.2 only; version 3.1.0.3 only; version 3.1.0.4 only

Published 2009-07-28. Last modified 2026-06-16.