CVE-2010-0308

 

Published at: - 03-02-2010 07:30

Last modified: - 04-10-2022 08:28

Total changes: - 2

Description

lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:S/C:N/I:N/A:P

 

Verification logic

 

Reference

• http://www.squid-cache.org/Advisories/SQUID-2010_1.txt
• 38455-Vendor Advisory
• http://events.ccc.de/congress/2009/Fahrplan/attachments/1483_26c3_ipv4_fuckups.pdf
• http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9163.patch
• 37522-
• ADV-2010-0260-Vendor Advisory
• 38451-Vendor Advisory
• 1023520-
• http://www.squid-cache.org/Versions/v2/HEAD/changesets/12597.patch
• 62044-
• http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-9853.patch
• squid-dns-dos(56001)-
• oval:org.mitre.oval:def:11270-

 

Keywords

NVD

 

CVE-2010-0308

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures