{"url":"http://public2.vulnerablecode.io/api/packages/181794?format=json","purl":"pkg:rpm/redhat/squid@7:3.1.10-16?arch=el6","type":"rpm","namespace":"redhat","name":"squid","version":"7:3.1.10-16","qualifiers":{"arch":"el6"},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/101387?format=json","vulnerability_id":"VCID-pq9r-bdfx-vqb8","summary":"Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service (memory consumption) via (1) invalid Content-Length headers, (2) long POST requests, or (3) crafted authentication credentials.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5643.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5643.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-5643","reference_id":"","reference_type":"","scores":[{"value":"0.33163","scoring_system":"epss","scoring_elements":"0.96996","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-5643"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=887962","reference_id":"887962","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=887962"},{"reference_url":"https://security.gentoo.org/glsa/201309-22","reference_id":"GLSA-201309-22","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201309-22"},{"reference_url":"https://access.redhat.com/errata/RHSA-2013:0505","reference_id":"RHSA-2013:0505","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2013:0505"}],"fixed_packages":[],"aliases":["CVE-2012-5643"],"risk_score":0.1,"exploitability":"0.5","weighted_severity":"0.3","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pq9r-bdfx-vqb8"}],"fixing_vulnerabilities":[],"risk_score":"0.1","resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/squid@7:3.1.10-16%3Farch=el6"}