Gentoo Linux Security Advisory GLSA 200409-04 – Squid 2.5.x versions contain a bug in the functions ntlm_fetch_string() and ntlm_get_string() which lack checking the int32_t offset o for negative values. A remote attacker could cause a denial of service situation by sending certain malformed NTLMSSP packets if NTLM authentication is enabled.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34257/glsa-200409-04.txt
Source: https://packetstormsecurity.com/files/34257/Gentoo-Linux-Security-Advisory-200409-4.html