CVE-2010-3072

CVE-2010-3072 affects Squid 3.x: string comparisons in String.cci on 3.1.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to trigger a NULL pointer dereference, causing a daemon crash (DoS). Concrete variants observed in advisories include upgrades to Squid 3.1.10 (and related patch...

CVE-2010-3072

The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted request...

Squid proxy server DoS

Crash on request with empty header strings...

Debian DSA-2111-1 : squid3 - denial of service

Phil Oester discovered that Squid-3, a fully featured Web Proxy cache, is prone to a denial of service attack via a specially crafted request that includes empty strings. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

DSA-2111-1 squid3 - denial of service

Bulletin has no description...

Fedora 13 : squid-3.1.8-1.fc13 (2010-14222)

Upstream 3.1.8 bugfix release fixing SQUID-2010:3 denial of service issue. Drop -fPIE compiler flag which resulted in inconsistent build and SELinux complaints. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 12 : squid-3.1.8-1.fc12 (2010-14236)

Upstream 3.1.8 bugfix release fixing SQUID-2010:3 denial of service issue. Drop -fPIE compiler flag which resulted in inconsistent build and SELinux complaints. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Squid 3.1.6 DNS Replay Denial of Service

Binary data 801040.prm...

Fedora 14 : squid-3.1.8-1.fc14 (2010-14149)

Upstream 3.1.8 bugfix release fixing SQUID-2010:3 denial of service issue. Drop -fPIE compiler flag which resulted in inconsistent build and SELinux complaints. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Squid 3.1.6 DNS Replay DoS

Binary data 5666.prm...

[SECURITY] Fedora 12 Update: squid-3.1.8-1.fc12

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

[SECURITY] Fedora 13 Update: squid-3.1.8-1.fc13

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

[SECURITY] Fedora 14 Update: squid-3.1.8-1.fc14

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

Squid Proxy String Processing NULL Pointer Dereference

The Squid proxy server is a popular open source, Internet proxy and web caching application. It supports various network protocols such as HTTP, FTP, SSL, DNS, and HTCP. It is primarily designed to run on Unix-like systems. A Denial of Service vulnerability exists in Squid Proxy Cache component...

Squid 3.x < 3.1.8 / 3.2.x < 3.2.0.2 NULL Pointer Dereference DoS

Binary data 5662.prm...

Squid < 3.1.8 / 3.2.0.2 NULL Pointer Dereference Denial of Service Vulnerability

Binary data 801043.prm...

Squid代理字符串处理空指针引用漏洞

BUGTRAQ ID: 42982 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 某些Squid内部字符串处理例程没有正确地检查空指针，远程攻击者可以通过发送恶意请求导致拒绝服务。 Squid Web Proxy Cache 3.2 Squid Web Proxy Cache 3.1 Squid Web Proxy Cache 3.0 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 1 将ignoreexpect10...

Squid String Processing NULL Pointer Dereference DoS Vulnerability (SQUID-2010:3)

Squid is prone to a remote denial of service DoS vulnerability caused by a NULL pointer dereference. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Squid 3.1.6 'DNS' Reply Remote Buffer Overflow Vulnerability

Squid is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Squid超长DNS回复拒绝服务漏洞

Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中，最新的Squid可以运行在Windows平台下。 Squid在处理所接受到的超长DNS回复时存在逻辑错误。如果Squid服务器没有配置IPv6解析器，在响应超过512字节时 dnsinternal.cc会从服务器获取TC标志，并试图通过TCP而不是UDP执行查询。Squid发起了TCP连接，并错误的认为正在发送 ipv6 dns查询，触发Assertion错误。 Squid Web Proxy Cache 3.1.6 Squid Web Proxy Cache...