CVE-2007-0248 The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) by causing an external_acl queue overload, which triggers an infinite loop.
MediumCVSS 5.0
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) by causing an external_acl queue overload, which triggers an infinite loop.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| squid | = 2.6.stable6 | No fix listed |
| debian/squid(Debian:12) | < 2.6.5-4 | 2.6.5-4 |
| debian/squid(Debian:13) | < 2.6.5-4 | 2.6.5-4 |
| debian/squid(Debian:14) | < 2.6.5-4 | 2.6.5-4 |
References
- 23767 patch third-party-advisory vendor-advisory
- 23805 third-party-advisory
- 23889 third-party-advisory
- 23921 third-party-advisory
- 23946 third-party-advisory
- GLSA-200701-22 vendor-advisory
- MDKSA-2007:026 vendor-advisory
- SUSE-SA:2007:012 vendor-advisory
- 22203 vdb-entry
- www.squid-cache.org
- www.squid-cache.org
- USN-414-1 vendor-advisory
- ADV-2007-0199 vdb-entry
- squid-externalacl-dos(31525) vdb-entry
- Debian Security Tracker CVE-2007-0248 vendor-advisory
- bugs.debian.org issue-tracking