Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Squid DNS vulnerability fixed in Squid-2.4.STABLE6

Package(s):

squid

CVE #(s):

CAN-2002-0163

Created:

July 8, 2002

Updated:

July 10, 2002

Description:

A malicously crafted DNS reply can cause Squid versions up to and including 2.4.STABLE4 to crash. Squid-2.4.STABLE6 fixes the vulnerability; see the updated advisory from the squid team for the details.

Alerts:

Eridani	ERISA-2002:027	2002-07-04
Red Hat	RHSA-2002:051-16	2002-07-02

(Log in to post comments)