Red Hat Security AdvisoryRHSA-2010:0221
squid security and bug fix update
Released 2010-03-29 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) squid-7:2.6.STABLE21-6.el5, squid-7:2.6.STABLE21-6.el5.i386, squid-7:2.6.STABLE21-6.el5.ia64 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) squid-7:2.6.STABLE21-6.el5, squid-7:2.6.STABLE21-6.el5.i386
Fixes 2 records
Priority MEDIUM 48
The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite loop of calls to the…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.34031 · Published 2009-08-18 · Fixed CWE-20
Priority MEDIUM 41
lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.2782 · Published 2010-02-03 · Partial fix CWE-20
