Lucene search
Gentoo FoundationGLSA-200801-05HistoryJan 09, 2008 - 12:00 a.m.
Squid: Denial of service
2008-01-0900:00:00
Gentoo Foundation
security.gentoo.org
26
squid
proxy server
vulnerability
denial of service
memory leak
remote attacker
cache updates
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.423
Percentile
97.4%
Background
Squid is a multi-protocol proxy server.
Description
The Wikimedia Foundation reported a memory leak vulnerability when performing cache updates.
Impact
A remote attacker could perform numerous specially crafted requests to the vulnerable server, resulting in a Denial of Service.
Workaround
There is no known workaround at this time.
Resolution
All Squid users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-proxy/squid-2.6.17"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-proxy/squid | <Β 2.6.17 | UNKNOWN |
Related
openvas
openvas
Oracle: Security Advisory (ELSA-2007-1130)
2015-10-08 00:00:00
SLES9: Security update for squid
2009-10-10 00:00:00
Ubuntu: Security Advisory (USN-565-1)
2009-03-23 00:00:00
cve
cve
CVE-2007-6239
2007-12-04 18:46:00
CVE-2008-1612
2008-04-01 17:44:00
fedora
fedora
[SECURITY] Fedora 7 Update: squid-2.6.STABLE16-2.fc7
2007-12-15 19:27:50
[SECURITY] Fedora 8 Update: squid-2.6.STABLE17-1.fc8
2007-12-15 19:27:04
cvelist
cvelist
CVE-2007-6239
2007-12-04 18:00:00
CVE-2008-1612
2008-04-01 17:00:00
nvd
nvd
CVE-2007-6239
2007-12-04 18:46:00
CVE-2008-1612
2008-04-01 17:44:00
prion
prion
Memory corruption
2007-12-04 18:46:00
Code injection
2008-04-01 17:44:00
freebsd
freebsd
Squid -- Denial of Service Vulnerability
2007-11-28 00:00:00
osv
osv
squid - programming error
2008-02-05 00:00:00
Red Hat Security Advisory: squid security update
2024-09-15 17:05:44
squid - array bounds check
2008-10-07 00:00:00
centos
centos
squid security update
2007-12-18 18:09:00
squid security update
2008-01-13 02:19:55
ubuntu
ubuntu
Squid vulnerability
2008-01-09 00:00:00
Squid vulnerability
2008-04-14 00:00:00
nessus
nessus
GLSA-200801-05 : Squid: Denial of Service
2008-01-10 00:00:00
Scientific Linux Security Update : squid on SL5.x, SL4.x, SL3.x i386/x86_64
2012-08-01 00:00:00
RHEL 2.1 / 3 / 4 / 5 : squid (RHSA-2007:1130)
2007-12-19 00:00:00
debiancve
debiancve
CVE-2007-6239
2007-12-04 18:46:00
CVE-2008-1612
2008-04-01 17:44:00
debian
debian
[SECURITY] [DSA 1482-1] New squid packages fix denial of service
2008-02-05 22:40:10
[SECURITY] [DSA 1646-2] New squid packages fix array bounds check
2008-10-11 06:46:58
[SECURITY] [DSA-1646-1] New squid packages fix array bounds check
2008-10-07 06:12:02
cert
cert
Squid remote denial-of-service vulnerability
2007-12-10 00:00:00
ubuntucve
ubuntucve
CVE-2007-6239
2007-12-04 00:00:00
CVE-2008-1612
2008-04-01 00:00:00
securityvulns
securityvulns
squid proxy server DoS
2007-12-12 00:00:00
[USN-601-1] Squid vulnerability
2008-04-15 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:19:28
oraclelinux
oraclelinux
Moderate: squid security update
2007-12-18 00:00:00
squid security update
2008-04-09 00:00:00
redhat
redhat
(RHSA-2007:1130) Moderate: squid security update
2007-12-18 00:00:00
seebug
seebug
Squid Web代ηηΌεarrayShrink()ε½ζ°θΏη¨ζη»ζε‘ζΌζ΄
2008-04-17 00:00:00
gentoo
gentoo
Squid: Multiple Denial of Service vulnerabilities
2009-03-24 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.423
Percentile
97.4%
Related for GLSA-200801-05