Unscored severity · published Dec 4, 2007
CVE-2007-6239
The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors…
–
CVSS
26.7%
EPSS
No
On KEV
Description
The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.
Exploitation
Is it being used?
Exploit prediction (EPSS)26.7% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SW
Squid Web Proxy Cache · Squid
2.0_patch2; 2.1_patch2; 2.3.stable4; 2.3.stable5; 2.4_stable2; 2.4_stable4; +32 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6239
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6239
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=201209
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
Patch
http://secunia.com/advisories/27910
Vendor Advisory
http://secunia.com/advisories/28091
Vendor Advisory
http://secunia.com/advisories/28109
Vendor Advisory
http://secunia.com/advisories/28350
More from Squid Web Proxy Cache
–
CVE-2009-0801
Squid, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for…