Servers and applications
CVE-2012-5643 Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.
Severity Medium 5.0
Published 20 Dec 2012
Last changed 16 Jun 2026
Added to UpHeron 1 Nov 2026 Exploit chance 23% in the next 30 daysHigher than 97% of CVEs. EPSS by FIRST , 12 Nov 2026
Attack Over the network · No login needed
Attacker can Slow it down
CVSS vector AV:N/AC:L/Au:N/C:N/I:N/A:P
Sources NVD Affected software Software Affected versions SquidServers and applications · cpe:a:squid-cache:squid Version 3.3.0.1 Version 3.2.3 Version 3.2.2 Version 3.2.1 All 95 release lines Version 2.0 Version 2.1 Version 2.2 Version 2.3 Version 2.4 Version 2.5 Version 2.6 Version 2.7 Version 2.7-stable3 Version 2.7-stable4 Version 3.0-rc4 Version 3.0.stable11-rc1 Version 3.0.stable16-rc1 Version 3.0 Version 3.0.stable1 Version 3.0.stable2 Version 3.0.stable3 Version 3.0.stable4 Version 3.0.stable5 Version 3.0.stable6 Version 3.0.stable7 Version 3.0.stable8 Version 3.0.stable9 Version 3.0.stable10 Version 3.0.stable11 Version 3.0.stable12 Version 3.0.stable13 Version 3.0.stable14 Version 3.0.stable15 Version 3.0.stable16 Version 3.0.stable17 Version 3.0.stable18 Version 3.0.stable19 Version 3.0.stable20 Version 3.0.stable21 Version 3.0.stable22 Version 3.0.stable23 Version 3.0.stable24 Version 3.0.stable25 Version 3.1 Version 3.1.0.1 Version 3.1.0.2 Version 3.1.0.3 Version 3.1.0.4 Version 3.1.0.5 Version 3.1.0.6 Version 3.1.0.7 Version 3.1.0.8 Version 3.1.0.9 Version 3.1.0.10 Version 3.1.0.11 Version 3.1.0.12 Version 3.1.0.13 Version 3.1.0.14 Version 3.1.0.15 Version 3.1.0.16 Version 3.1.0.17 Version 3.1.0.18 Version 3.1.1 Version 3.1.2 Version 3.1.10 Version 3.1.11 Version 3.1.12 Version 3.1.13 Version 3.1.14 Version 3.1.15 Version 3.1.16 Version 3.1.17 Version 3.1.18 Version 3.1.19 Version 3.1.20 Version 3.1.21 Version 3.2.0.1 Version 3.2.0.2 Version 3.2.0.3 Version 3.2.0.4 Version 3.2.0.5 Version 3.2.0.6 Version 3.2.0.7 Version 3.2.0.8 Version 3.2.0.9 Version 3.2.0.10 Version 3.2.0.11 Version 3.2.0.12 Version 3.2.0.13 Version 3.2.0.14 Version 3.2.0.15 Version 3.2.0.16 Version 3.2.0.17 Version 3.2.0.18 Version 3.2.0.19 Version 3.2.1 Version 3.2.2 Version 3.2.3 Version 3.3.0.1
References NVD https://nvd.nist.gov/vuln/detail/CVE-2012-5643 CVE.org https://www.cve.org/CVERecord?id=CVE-2012-5643