Red Hat Security Advisory

RHSA-2007:0131

squid security update

Released 2007-04-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) squid-7:2.6.STABLE6-4.el5, squid-7:2.6.STABLE6-4.el5.i386, squid-7:2.6.STABLE6-4.el5.ia64 +1
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) squid-7:2.6.STABLE6-4.el5, squid-7:2.6.STABLE6-4.el5.i386

Fixes 1 record

TI-2007-01502 CVE-2007-1560 · GHSA-cmwg-5hv4-pp63

The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12…

MEDIUM 46

The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.28231 Published 2007-03-21 Fixed