Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-6239
HistoryDec 04, 2007 - 12:00 a.m.

CVE-2007-6239

2007-12-0400:00:00
ubuntu.com
ubuntu.com
11

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.179 Low

EPSS

Percentile

96.1%

The β€œcache update reply processing” functionality in Squid 2.x before
2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of
service (crash) via unknown vectors related to HTTP headers and an Array
memory leak during requests for cached objects.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsquid<Β 2.5.12-4ubuntu2.3UNKNOWN
ubuntu6.10noarchsquid<Β 2.6.1-3ubuntu1.5UNKNOWN
ubuntu7.04noarchsquid<Β 2.6.5-4ubuntu2.1UNKNOWN
ubuntu7.10noarchsquid<Β 2.6.14-1ubuntu2.1UNKNOWN
ubuntu7.04noarchsquid3<Β 3.0.PRE5-5ubuntu0.1UNKNOWN
ubuntu7.10noarchsquid3<Β 3.0.PRE6-1ubuntu0.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.179 Low

EPSS

Percentile

96.1%