CVE-2010-3072
NoneCVSS
—
EPSS
59.9%
Published
Sep 20, 2010
CISA due date
—
The record
The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:5.0 | squid3 | 0 | 3.0.STABLE8-3+lenny4 |
| Red Hat:enterprise_linux:6::server | squid | 0 | 7:3.1.10-1.el6 |
| Red Hat:enterprise_linux:6::server | squid-debuginfo | 0 | 7:3.1.10-1.el6 |
| Red Hat:enterprise_linux:6::workstation | squid | 0 | 7:3.1.10-1.el6 |
| Red Hat:enterprise_linux:6::workstation | squid-debuginfo | 0 | 7:3.1.10-1.el6 |
Related vulnerabilities
- CVE-2011-3205 Buffer overflow in the gopherToHTML function in gopher.cc in the Gopher reply parser in… Also affects squid3
- CVE-2010-0308 lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows… Also affects squid3
- CVE-2009-2855 The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers… Also affects squid3
- CVE-2009-2622 Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 allows remote attackers to cause… Also affects squid3
- CVE-2009-2621 Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer… Also affects squid3
- CVE-2016-4556 Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10… Also affects squid
- CVE-2016-4554 mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended… Also affects squid
- CVE-2016-4054 Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers… Also affects squid