Squid vulnerability

2010-02-2400:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.943

Percentile

99.2%

JSON

Releases

Ubuntu 9.10
Ubuntu 9.04
Ubuntu 8.10
Ubuntu 8.04

Packages

squid -

Details

It was discovered that Squid incorrectly handled certain malformed packets
received on the HTCP port. A remote attacker could exploit this with a
specially-crafted packet and cause Squid to crash, resulting in a denial of
service.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchsquid< 2.7.STABLE6-2ubuntu2.2UNKNOWN
Ubuntu9.10noarchsquid-cgi< 2.7.STABLE6-2ubuntu2.2UNKNOWN
Ubuntu9.04noarchsquid< 2.7.STABLE3-4.1ubuntu1.2UNKNOWN
Ubuntu9.04noarchsquid-cgi< 2.7.STABLE3-4.1ubuntu1.2UNKNOWN
Ubuntu8.10noarchsquid< 2.7.STABLE3-1ubuntu2.3UNKNOWN
Ubuntu8.10noarchsquid-cgi< 2.7.STABLE3-1ubuntu2.3UNKNOWN
Ubuntu8.04noarchsquid< 2.6.18-1ubuntu3.2UNKNOWN
Ubuntu8.04noarchsquid-cgi< 2.6.18-1ubuntu3.2UNKNOWN
Ubuntu8.04noarchsquidclient< 2.6.18-1ubuntu3.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.10	noarch	squid	< 2.7.STABLE6-2ubuntu2.2	UNKNOWN
Ubuntu	9.10	noarch	squid-cgi	< 2.7.STABLE6-2ubuntu2.2	UNKNOWN
Ubuntu	9.04	noarch	squid	< 2.7.STABLE3-4.1ubuntu1.2	UNKNOWN
Ubuntu	9.04	noarch	squid-cgi	< 2.7.STABLE3-4.1ubuntu1.2	UNKNOWN
Ubuntu	8.10	noarch	squid	< 2.7.STABLE3-1ubuntu2.3	UNKNOWN
Ubuntu	8.10	noarch	squid-cgi	< 2.7.STABLE3-1ubuntu2.3	UNKNOWN
Ubuntu	8.04	noarch	squid	< 2.6.18-1ubuntu3.2	UNKNOWN
Ubuntu	8.04	noarch	squid-cgi	< 2.6.18-1ubuntu3.2	UNKNOWN
Ubuntu	8.04	noarch	squidclient	< 2.6.18-1ubuntu3.2	UNKNOWN