CVE-2015-0881

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-20 · updated 2026-06-17

Description

CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response.

Affected products

Squid: through 3.1.0.18

References

http://jvn.jp/en/jp/JVN64455813/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000019
http://jvn.jp/en/jp/JVN64455813/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000019

Get alerted when CVE-2015-0881 or the next vulnerability affects your stack