Lucene search

K
gentooGentoo FoundationGLSA-200801-05
HistoryJan 09, 2008 - 12:00 a.m.

Squid: Denial of service

2008-01-0900:00:00
Gentoo Foundation
security.gentoo.org
18

0.179 Low

EPSS

Percentile

96.2%

Background

Squid is a multi-protocol proxy server.

Description

The Wikimedia Foundation reported a memory leak vulnerability when performing cache updates.

Impact

A remote attacker could perform numerous specially crafted requests to the vulnerable server, resulting in a Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All Squid users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-proxy/squid-2.6.17"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-proxy/squid<Β 2.6.17UNKNOWN