Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-6239
HistoryDec 04, 2007 - 12:00 a.m.

CVE-2007-6239

2007-12-0400:00:00
ubuntu.com
ubuntu.com
33
squid
cache update
denial of service
http headers

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.423

Percentile

97.4%

The β€œcache update reply processing” functionality in Squid 2.x before
2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of
service (crash) via unknown vectors related to HTTP headers and an Array
memory leak during requests for cached objects.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchsquid<Β 2.5.12-4ubuntu2.3UNKNOWN
ubuntu6.10noarchsquid<Β 2.6.1-3ubuntu1.5UNKNOWN
ubuntu7.04noarchsquid<Β 2.6.5-4ubuntu2.1UNKNOWN
ubuntu7.10noarchsquid<Β 2.6.14-1ubuntu2.1UNKNOWN
ubuntu7.04noarchsquid3<Β 3.0.PRE5-5ubuntu0.1UNKNOWN
ubuntu7.10noarchsquid3<Β 3.0.PRE6-1ubuntu0.1UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

0.423

Percentile

97.4%