UpHeron
All vulnerabilities

Servers and applications

CVE-2018-1172

This vulnerability allows remote attackers to deny service on vulnerable installations of The Squid Software Foundation Squid 3.5.27-20180318. Authentication is not required to exploit this vulnerability. The specific flaw exists within ClientRequestContext::sslBumpAccessCheck(). A crafted request can trigger the dereference of a null pointer. An attacker can leverage this vulnerability to…

Severity
Medium 5.9
Published
16 May 2018
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
8.2% in the next 30 daysHigher than 94% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
SquidServers and applications · cpe:a:squid-cache:squid
  • Version 3.5.27

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-1172
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-1172