Lucene search
CentOS ProjectCESA-2007:1130-04HistoryJan 13, 2008 - 2:19 a.m.
squid security update
2008-01-1302:19:55
CentOS Project
lists.centos.org
50
0.179 Low
EPSS
Percentile
96.2%
CentOS Errata and Security Advisory CESA-2007:1130-04
Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects.
A flaw was found in the way squid stored HTTP headers for cached objects
in system memory. An attacker could cause squid to use additional memory,
and trigger high CPU usage when processing requests for certain cached
objects, possibly leading to a denial of service. (CVE-2007-6239)
Users of squid are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2008-January/076743.html
Affected packages:
squid
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| CentOS | 2 | i386 | squid | <Β 2.4.STABLE7-1.21as.11 | squid-2.4.STABLE7-1.21as.11.i386.rpm |
Related
nessus
nessus
CentOS 3 / 4 / 5 : squid (CESA-2007:1130)
2007-12-19 00:00:00
Scientific Linux Security Update : squid on SL5.x, SL4.x, SL3.x i386/x86_64
2012-08-01 00:00:00
Fedora 7 : squid-2.6.STABLE16-2.fc7 (2007-4161)
2007-12-17 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200801-05 (squid)
2008-09-24 00:00:00
CentOS Update for squid CESA-2007:1130 centos4 i386
2009-02-27 00:00:00
FreeBSD Ports: squid
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 1482-1] New squid packages fix denial of service
2008-02-05 22:40:29
[SECURITY] [DSA-1646-1] New squid packages fix array bounds check
2008-10-07 06:12:02
[SECURITY] [DSA 1646-2] New squid packages fix array bounds check
2008-10-11 06:47:39
osv
osv
squid - programming error
2008-02-05 00:00:00
squid - array bounds check
2008-10-07 00:00:00
ubuntu
ubuntu
Squid vulnerability
2008-01-09 00:00:00
Squid vulnerability
2008-04-14 00:00:00
centos
centos
squid security update
2007-12-18 18:09:00
debiancve
debiancve
CVE-2007-6239
2007-12-04 18:46:00
CVE-2008-1612
2008-04-01 17:44:00
ubuntucve
ubuntucve
CVE-2007-6239
2007-12-04 00:00:00
CVE-2008-1612
2008-04-01 00:00:00
securityvulns
securityvulns
squid proxy server DoS
2007-12-12 00:00:00
[USN-601-1] Squid vulnerability
2008-04-15 00:00:00
cert
cert
Squid remote denial-of-service vulnerability
2007-12-10 00:00:00
redhat
redhat
(RHSA-2007:1130) Moderate: squid security update
2007-12-18 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: squid-2.6.STABLE17-1.fc8
2007-12-15 19:27:04
[SECURITY] Fedora 7 Update: squid-2.6.STABLE16-2.fc7
2007-12-15 19:27:50
oraclelinux
oraclelinux
Moderate: squid security update
2007-12-18 00:00:00
squid security update
2008-04-09 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:19:28
prion
prion
Memory corruption
2007-12-04 18:46:00
Code injection
2008-04-01 17:44:00
freebsd
freebsd
Squid -- Denial of Service Vulnerability
2007-11-28 00:00:00
gentoo
gentoo
Squid: Denial of service
2008-01-09 00:00:00
Squid: Multiple Denial of Service vulnerabilities
2009-03-24 00:00:00
cve
cve
CVE-2007-6239
2007-12-04 18:46:00
CVE-2008-1612
2008-04-01 17:44:00
seebug
seebug
Squid Web代ηηΌεarrayShrink()ε½ζ°θΏη¨ζη»ζε‘ζΌζ΄
2008-04-17 00:00:00