CVE-2007-0248

7 documents7 sources
Severity
5.0MEDIUM
EPSS
52.6%
top 2.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Squid Squid
Timeline
PublishedJan 16
Latest updateMay 1

Description

The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) by causing an external_acl queue overload, which triggers an infinite loop.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶Debiansquid< 2.6.5-4+3
▶NVDsquid/squid2.6.stable6

Patches

Patch: secunia.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-w46f-hrch-xgr2: The aclMatchExternal function in Squid before 2↗2022-05-01
▶
OSV
CVE-2007-0248: The aclMatchExternal function in Squid before 2↗2007-01-16
▶
CVEList
CVE-2007-0248: The aclMatchExternal function in Squid before 2↗2007-01-16
▶

📋Vendor Advisories

3
Ubuntu
Squid vulnerabilities↗2007-01-25
▶
Debian
CVE-2007-0248: squid - The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attacker...↗2007
▶
Red Hat
CVE-2007-0248: The aclMatchExternal function in Squid before 2↗
▶