PT-2010-4526 · Squid+1 · Squid+2

Phil Oester · Publicado 2010-09-20 · Atualizado 2011-05-19 · CVE-2010-3072

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Squid versions 3.0.0 through 3.1.7 Squid versions 3.2.0 through 3.2.0.1

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted request. This is due to a problem in the string-comparison functions.

Recommendations For Squid versions 3.0.0 through 3.1.7, update to version 3.1.8 or later. For Squid versions 3.2.0 through 3.2.0.1, update to version 3.2.0.2 or later.

Correção

Identificadores relacionados

CVE-2010-3072

DSA-2111-1

RHSA-2011:0545

RHSA-2011_0545

Produtos afetados

Red Hat

Squid

Squid Cache

Referências · 20

• http://securityfocus.com/bid/42982 · Nota
• http://openwall.com/lists/oss-security/2010/09/07/7 · Correção
• http://secunia.com/advisories/41477 · Aviso do Fabricante
• http://secunia.com/advisories/41298 · Aviso do Fabricante
• http://secunia.com/advisories/41534 · Nota
• http://vupen.com/english/advisories/2010/2433 · Nota
• http://debian.org/security/2010/dsa-2111 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2011:0545 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3072 · Nota
• https://linux.oracle.com/errata/ELSA-2011-0545.html · Aviso do Fabricante
• http://squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10090.patch · Correção
• https://access.redhat.com/security/cve/CVE-2010-3072 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047787.html · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=630444 · Correção