Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2008-1612
HistoryApr 01, 2008 - 5:44 p.m.

CVE-2008-1612

2008-04-0117:44:00
Debian Security Bug Tracker
security-tracker.debian.org
15

6.2 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.9%

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239.