The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a "," character in an Accept-Language header.

The remote host is affected by the vulnerability described in GLSA-201309-22 (Squid: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Squid. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker may be able to bypass ACL restrictions or cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This is security update that fixes CVE-2013-1839.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Squid version prior to 3.2.9 or 3.3.3 are potentially affected by a denial of service vulnerability. An error exists in the function 'strHdrAcptLangGetItem' in the field 'errorpage.cc' that would allow certain 'Accept-Language' HTTP headers to cause a denial of service condition.

According to its banner, the version of Squid running on the remote host is 3.2.x prior to 3.2.9 or 3.3.x prior to 3.3.3 and is, therefore, affected by a denial of service vulnerability.  An error exists in the function 'strHdrAcptLangGetItem' in the file 'errorpage.cc' that could allow certain 'Accept-Language' HTTP headers to cause a denial of service condition. 

Note that Nessus has relied only on the version in the proxy server's banner, which is not updated by the patch the project has released to address the issue.  If this patch has been applied properly and the service has been restarted, consider this to be a false positive.

ID	Name	Product	Family	Severity
70182	GLSA-201309-22 : Squid: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
65825	Fedora 17 : squid-3.2.9-1.fc17 (2013-4063)	Nessus	Fedora Local Security Checks	high
65824	Fedora 18 : squid-3.2.9-1.fc18 (2013-4050)	Nessus	Fedora Local Security Checks	high
6748	Squid 3.x < 3.2.9 / 3.3.x < 3.3.3 strHdrAcptLangGetItem DoS	Nessus Network Monitor	Web Servers	low
65601	Squid 3.x < 3.2.9 / 3.3.3 strHdrAcptLangGetItem Malformed Accept-Language Denial of Service	Nessus	Firewalls	high

Detections

Analytics

CVE-2013-1839

high

Tenable Plugins

high

high

high

low

high