CVE-2007-1560

Published: Mar 21, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.

Affected (11)

Products: Squid: Squid

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Squid Squid	Version 2.6.stable10
Squid Squid	Version 2.6.stable11
Squid Squid	Version 2.6.stable1
Squid Squid	Version 2.6.stable2
Squid Squid	Version 2.6.stable3
Squid Squid	Version 2.6.stable4
Squid Squid	Version 2.6.stable5
Squid Squid	Version 2.6.stable6
Squid Squid	Version 2.6.stable7
Squid Squid	Version 2.6.stable8
Squid Squid	Version 2.6.stable9

References (34)

http://secunia.com/advisories/24611

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/24614

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24625

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24662

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24911

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200703-27.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:068

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_5_sr.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0131.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/23085

Source: secalert@redhat.com

http://www.securitytracker.com/id?1017805

Source: secalert@redhat.com

http://www.squid-cache.org/Advisories/SQUID-2007_1.txt

Source: secalert@redhat.com

PatchVendor Advisory

http://www.squid-cache.org/Versions/v2/2.6/changesets/11349.patch

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-441-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1035

Source: secalert@redhat.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33124

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10291

Source: secalert@redhat.com

http://secunia.com/advisories/24611

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/24614

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/24625

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/24662

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/24911

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200703-27.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:068

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2007_5_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-0131.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/23085

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017805

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.squid-cache.org/Advisories/SQUID-2007_1.txt

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.squid-cache.org/Versions/v2/2.6/changesets/11349.patch

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-441-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1035

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33124

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10291

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.