CVE ID:	CVE-2018-1000027
Description:	The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via Remote HTTP server responding with an X-Forwarded- For header to certain types of HTTP request. This vulnerability appears to have been fixed in 4.0.23 and later.
Test IDs:	1.3.6.1.4.1.25623.1.0.704122   1.3.6.1.4.1.25623.1.0.891266   1.3.6.1.4.1.25623.1.0.107296   1.3.6.1.4.1.25623.1.0.891267   1.3.6.1.4.1.25623.1.0.107297
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1000027 Debian Security Information: DSA-4122 (Google Search) https://www.debian.org/security/2018/dsa-4122 https://lists.debian.org/debian-lts-announce/2018/02/msg00001.html https://lists.debian.org/debian-lts-announce/2018/02/msg00002.html https://usn.ubuntu.com/3557-1/ https://usn.ubuntu.com/4059-2/