Lucene search

K
osvGoogleOSV:DSA-1482-1
HistoryFeb 05, 2008 - 12:00 a.m.

squid - programming error

2008-02-0500:00:00
Google
osv.dev
5

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

It was discovered that malformed cache update replies against the Squid
WWW proxy cache could lead to the exhaustion of system memory, resulting
in potential denial of service.

For the old stable distribution (sarge), the update cannot currently
be processed on the buildd security network due to a bug in the archive
management script. This will be resolved soon. An update for i386
is temporarily available at .

For the stable distribution (etch), this problem has been fixed in
version 2.6.5-6etch1.

We recommend that you upgrade your squid packages.

CPENameOperatorVersion
squideq2.6.5-6

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P