CVE ID:	CVE-2014-3609
Description:	HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values."
Test IDs:	1.3.6.1.4.1.25623.1.1.1.2.2015.216   1.3.6.1.4.1.25623.1.0.703139   1.3.6.1.4.1.25623.1.0.881993   1.3.6.1.4.1.25623.1.0.841945   1.3.6.1.4.1.25623.1.0.806106   1.3.6.1.4.1.25623.1.0.703014   1.3.6.1.4.1.25623.1.0.871235   1.3.6.1.4.1.25623.1.0.881996   1.3.6.1.4.1.25623.1.0.123323   1.3.6.1.4.1.25623.1.0.871232   1.3.6.1.4.1.25623.1.1.1.2.2014.45   1.3.6.1.4.1.25623.1.1.4.2014.1140.1   1.3.6.1.4.1.25623.1.0.123322   1.3.6.1.4.1.25623.1.1.10.2014.0369   1.3.6.1.4.1.25623.1.0.850753   1.3.6.1.4.1.25623.1.0.882006   1.3.6.1.4.1.25623.1.0.868166
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3609 BugTraq ID: 69453 http://www.securityfocus.com/bid/69453 Debian Security Information: DSA-3014 (Google Search) http://www.debian.org/security/2014/dsa-3014 Debian Security Information: DSA-3139 (Google Search) http://www.debian.org/security/2015/dsa-3139 RedHat Security Advisories: RHSA-2014:1147 http://rhn.redhat.com/errata/RHSA-2014-1147.html http://secunia.com/advisories/60179 http://secunia.com/advisories/60334 http://secunia.com/advisories/61320 http://secunia.com/advisories/61412 SuSE Security Announcement: SUSE-SU-2014:1140 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00025.html SuSE Security Announcement: openSUSE-SU-2014:1144 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-09/msg00029.html http://www.ubuntu.com/usn/USN-2327-1