squid: denial of service [LWN.net]

Package(s):

squid

CVE #(s):

CVE-2010-0308

Created:

February 8, 2010

Updated:

March 31, 2010

Description:

From the Mandriva advisory:

A vulnerability have been discovered and corrected in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15, which allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header (CVE-2010-0308).

Alerts:

Gentoo	201110-24	2011-10-26
Red Hat	RHSA-2010:0221-04	2010-03-30
SuSE	SUSE-SR:2010:007	2010-03-30
Fedora	FEDORA-2010-2434	2010-02-21
Ubuntu	USN-901-1	2010-02-16
Mandriva	MDVSA-2010:033	2010-02-08

(Log in to post comments)