CVE-2012-5643: Squid-Cache Squid

Medium severity, CVSS 5.0. EPSS: 23% chance of exploitation in the next 30 days.

Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.

Affected products

• Squid-Cache Squid: version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only; version 2.5 only; …

Published 2012-12-20. Last modified 2026-06-16.