cachemgr.cgi in Squid 3.1.x and 3.2.x possibly 3.1.22 3.2.4 and other versions allows remote attackers to cause a denial of service (resource consumption) via a crafted request. NOTE: this issue is due to an incorrect fix for CVE-2012-5643 possibly involving an incorrect order of arguments or incorrect comparison.