Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-6239
HistoryDec 04, 2007 - 6:46 p.m.

CVE-2007-6239

2007-12-0418:46:00
CWE-20
[email protected]
web.nvd.nist.gov
7
squid
denial of service
http headers
cache update
remote attackers
memory leak

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.423

Percentile

97.4%

JSON

The β€œcache update reply processing” functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

Affected configurations

Nvd
Node
squidsquid_web_proxy_cacheMatch2.0_patch2
OR
squidsquid_web_proxy_cacheMatch2.1_patch2
OR
squidsquid_web_proxy_cacheMatch2.3.stable4
OR
squidsquid_web_proxy_cacheMatch2.3.stable5
OR
squidsquid_web_proxy_cacheMatch2.4_stable2
OR
squidsquid_web_proxy_cacheMatch2.4_stable4
OR
squidsquid_web_proxy_cacheMatch2.4_stable6
OR
squidsquid_web_proxy_cacheMatch2.4_stable7
OR
squidsquid_web_proxy_cacheMatch2.5.stable11
OR
squidsquid_web_proxy_cacheMatch2.5.stable12
OR
squidsquid_web_proxy_cacheMatch2.5.stable13
OR
squidsquid_web_proxy_cacheMatch2.5.stable14
OR
squidsquid_web_proxy_cacheMatch2.5_.stable9
OR
squidsquid_web_proxy_cacheMatch2.5_stable1
OR
squidsquid_web_proxy_cacheMatch2.5_stable3
OR
squidsquid_web_proxy_cacheMatch2.5_stable4
OR
squidsquid_web_proxy_cacheMatch2.5_stable5
OR
squidsquid_web_proxy_cacheMatch2.5_stable6
OR
squidsquid_web_proxy_cacheMatch2.5_stable7
OR
squidsquid_web_proxy_cacheMatch2.5_stable8
OR
squidsquid_web_proxy_cacheMatch2.5_stable10
OR
squidsquid_web_proxy_cacheMatch2.6
OR
squidsquid_web_proxy_cacheMatch2.6.stable1
OR
squidsquid_web_proxy_cacheMatch2.6.stable2
OR
squidsquid_web_proxy_cacheMatch2.6.stable3
OR
squidsquid_web_proxy_cacheMatch2.6.stable4
OR
squidsquid_web_proxy_cacheMatch2.6.stable5
OR
squidsquid_web_proxy_cacheMatch2.6.stable6
OR
squidsquid_web_proxy_cacheMatch2.6.stable7
OR
squidsquid_web_proxy_cacheMatch2.6.stable12
OR
squidsquid_web_proxy_cacheMatch2.6.stable13
OR
squidsquid_web_proxy_cacheMatch2.6.stable14
OR
squidsquid_web_proxy_cacheMatch2.6.stable15
OR
squidsquid_web_proxy_cacheMatch2.6.stable16
OR
squidsquid_web_proxy_cacheMatch3.0
OR
squidsquid_web_proxy_cacheMatch3.0_pre1
OR
squidsquid_web_proxy_cacheMatch3.0_pre2
OR
squidsquid_web_proxy_cacheMatch3.0_pre3
VendorProductVersionCPE
squidsquid_web_proxy_cache2.0_patch2cpe:2.3:a:squid:squid_web_proxy_cache:2.0_patch2:*:*:*:*:*:*:*
squidsquid_web_proxy_cache2.1_patch2cpe:2.3:a:squid:squid_web_proxy_cache:2.1_patch2:*:*:*:*:*:*:*
squidsquid_web_proxy_cache2.3.stable4cpe:2.3:a:squid:squid_web_proxy_cache:2.3.stable4:*:*:*:*:*:*:*
squidsquid_web_proxy_cache2.3.stable5cpe:2.3:a:squid:squid_web_proxy_cache:2.3.stable5:*:*:*:*:*:*:*
squidsquid_web_proxy_cache2.4_stable2cpe:2.3:a:squid:squid_web_proxy_cache:2.4_stable2:*:*:*:*:*:*:*
squidsquid_web_proxy_cache2.4_stable4cpe:2.3:a:squid:squid_web_proxy_cache:2.4_stable4:*:*:*:*:*:*:*
squidsquid_web_proxy_cache2.4_stable6cpe:2.3:a:squid:squid_web_proxy_cache:2.4_stable6:*:*:*:*:*:*:*
squidsquid_web_proxy_cache2.4_stable7cpe:2.3:a:squid:squid_web_proxy_cache:2.4_stable7:*:*:*:*:*:*:*
squidsquid_web_proxy_cache2.5.stable11cpe:2.3:a:squid:squid_web_proxy_cache:2.5.stable11:*:*:*:*:*:*:*
squidsquid_web_proxy_cache2.5.stable12cpe:2.3:a:squid:squid_web_proxy_cache:2.5.stable12:*:*:*:*:*:*:*
Rows per page:
1-10 of 381

References

Related

openvas 52
debiancve 2
nessus 22
ubuntu 2
centos 2
osv 3
cve 2
fedora 2
gentoo 2
cvelist 2
prion 2
freebsd 1
debian 5
cert 1
ubuntucve 2
securityvulns 2
veracode 1
oraclelinux 2
redhat 1
nvd 1
seebug 1
openvas
openvas
Mandriva Update for squid MDVSA-2008:002 (squid)
2009-04-09 00:00:00
SLES10: Security update for squid
2009-10-13 00:00:00
CentOS Update for squid CESA-2007:1130 centos3 i386
2009-02-27 00:00:00
debiancve
debiancve
CVE-2007-6239
2007-12-04 18:46:00
CVE-2008-1612
2008-04-01 17:44:00
nessus
nessus
GLSA-200801-05 : Squid: Denial of Service
2008-01-10 00:00:00
Scientific Linux Security Update : squid on SL5.x, SL4.x, SL3.x i386/x86_64
2012-08-01 00:00:00
openSUSE 10 Security Update : squid (squid-4779)
2007-12-31 00:00:00
ubuntu
ubuntu
Squid vulnerability
2008-01-09 00:00:00
Squid vulnerability
2008-04-14 00:00:00
centos
centos
squid security update
2007-12-18 18:09:00
squid security update
2008-01-13 02:19:55
osv
osv
squid - programming error
2008-02-05 00:00:00
Red Hat Security Advisory: squid security update
2024-09-15 17:05:44
squid - array bounds check
2008-10-07 00:00:00
cve
cve
CVE-2007-6239
2007-12-04 18:46:00
CVE-2008-1612
2008-04-01 17:44:00
fedora
fedora
[SECURITY] Fedora 7 Update: squid-2.6.STABLE16-2.fc7
2007-12-15 19:27:50
[SECURITY] Fedora 8 Update: squid-2.6.STABLE17-1.fc8
2007-12-15 19:27:04
gentoo
gentoo
Squid: Denial of service
2008-01-09 00:00:00
Squid: Multiple Denial of Service vulnerabilities
2009-03-24 00:00:00
cvelist
cvelist
CVE-2007-6239
2007-12-04 18:00:00
CVE-2008-1612
2008-04-01 17:00:00
prion
prion
Memory corruption
2007-12-04 18:46:00
Code injection
2008-04-01 17:44:00
freebsd
freebsd
Squid -- Denial of Service Vulnerability
2007-11-28 00:00:00
debian
debian
[SECURITY] [DSA 1482-1] New squid packages fix denial of service
2008-02-05 22:40:10
[SECURITY] [DSA 1646-2] New squid packages fix array bounds check
2008-10-11 06:46:58
[SECURITY] [DSA-1646-1] New squid packages fix array bounds check
2008-10-07 06:12:02
cert
cert
Squid remote denial-of-service vulnerability
2007-12-10 00:00:00
ubuntucve
ubuntucve
CVE-2007-6239
2007-12-04 00:00:00
CVE-2008-1612
2008-04-01 00:00:00
securityvulns
securityvulns
squid proxy server DoS
2007-12-12 00:00:00
[USN-601-1] Squid vulnerability
2008-04-15 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:19:28
oraclelinux
oraclelinux
Moderate: squid security update
2007-12-18 00:00:00
squid security update
2008-04-09 00:00:00
redhat
redhat
(RHSA-2007:1130) Moderate: squid security update
2007-12-18 00:00:00
nvd
nvd
CVE-2008-1612
2008-04-01 17:44:00
seebug
seebug
Squid Webδ»£η†ηΌ“ε­˜arrayShrink()ε‡½ζ•°θΏœη¨‹ζ‹’η»ζœεŠ‘ζΌζ΄ž
2008-04-17 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.423

Percentile

97.4%

JSON
Related for NVD:CVE-2007-6239
openvas52debiancve2nessus22ubuntu2centos2osv3cve2fedora2gentoo2cvelist2prion2freebsd1debian5cert1ubuntucve2securityvulns2veracode1oraclelinux2redhat1nvd1seebug1