← Back

CVE-2010-0308

nvd nist
Published: Feb 3, 2010Modified: Apr 29, 2026

JSON object

Loading...
4.0
Vector
AV:N/AC:L/Au:S/C:N/I:N/A:P
Exploitability: 8.0 / Impact: 2.9
Source: NVD

Description

lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.

Affected (46)

Products: Squid Cache: Squid
Squid Cache
1 product
Squid
Configuration A
46 vulnerable
Vulnerable SoftwareAffected Versions
Squid Cache
Squid
Version 2.0
Squid
Version 2.1
Squid
Version 2.2
Squid
Version 2.3
Squid
Version 2.4
Squid
Version 2.5
Squid
Version 2.6
Squid
Version 2.7
Squid
Version 3.0.stable11
Squid
Version 3.0.stable12
Squid
Version 3.0.stable13
Squid
Version 3.0.stable14
Squid
Version 3.0.stable15
Squid
Version 3.0.stable16
Squid
Version 3.0.stable17
Squid
Version 3.0.stable18
Squid
Version 3.0.stable19
Squid
Version 3.0.stable1
Squid
Version 3.0.stable20
Squid
Version 3.0.stable21
Squid
Version 3.0.stable22
Squid
Version 3.0.stable2
Squid
Version 3.0.stable3
Squid
Version 3.0.stable4
Squid
Version 3.0.stable5
Squid
Version 3.0.stable6
Squid
Version 3.0.stable7
Squid
Version 3.0.stable8
Squid
Version 3.0.stable9
Squid
Version 3.0
Squid
Version 3.1.0.10
Squid
Version 3.1.0.11
Squid
Version 3.1.0.12
Squid
Version 3.1.0.13
Squid
Version 3.1.0.14
Squid
Version 3.1.0.15
Squid
Version 3.1.0.1
Squid
Version 3.1.0.2
Squid
Version 3.1.0.3
Squid
Version 3.1.0.4
Squid
Version 3.1.0.5
Squid
Version 3.1.0.6
Squid
Version 3.1.0.7
Squid
Version 3.1.0.8
Squid
Version 3.1.0.9
Squid
Version 3.1

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (26)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.