Red Hat Security AdvisoryRHSA-2014:1148
squid security update
Released 2014-09-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) squid-7:2.6.STABLE21-7.el5_10, squid-7:2.6.STABLE21-7.el5_10.i386, squid-7:2.6.STABLE21-7.el5_10.ia64 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) squid-7:2.6.STABLE21-7.el5_10, squid-7:2.6.STABLE21-7.el5_10.i386
- Red Hat Enterprise Linux Server (v. 6) squid-7:3.1.10-22.el6_5
- Red Hat Enterprise Linux Workstation (v. 6) squid-7:3.1.10-22.el6_5
Fixes 2 records
Priority MEDIUM 62
Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.43895 · Published 2013-08-09 · Fixed CWE-119
Priority MEDIUM 56
HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request with crafted "Range headers with unidentifiable byte-range values."
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.5622 · Published 2014-09-11 · Partial fix CWE-20
