An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug it is vulnerable to a Denial of Service attack (against all clients using the proxy) via HTTP Range request processing.