CVE-2007-1560

medium · 5

The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.

CVSS

27.5%

EPSS (exploit prob.)

98th

EPSS percentile

2007-03-21

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Vendor	Product	Affected versions
squid	squid	2.6.stable1
squid	squid	2.6.stable2
squid	squid	2.6.stable3
squid	squid	2.6.stable4
squid	squid	2.6.stable5
squid	squid	2.6.stable6
squid	squid	2.6.stable7
squid	squid	2.6.stable8
squid	squid	2.6.stable9
squid	squid	2.6.stable10
squid	squid	2.6.stable11

Check a specific version with /api/v1/cve/match.

References

http://secunia.com/advisories/24611
http://secunia.com/advisories/24614
http://secunia.com/advisories/24625
http://secunia.com/advisories/24662
http://secunia.com/advisories/24911
http://security.gentoo.org/glsa/glsa-200703-27.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:068
http://www.novell.com/linux/security/advisories/2007_5_sr.html
http://www.redhat.com/support/errata/RHSA-2007-0131.html
http://www.securityfocus.com/bid/23085
http://www.securitytracker.com/id?1017805
http://www.squid-cache.org/Advisories/SQUID-2007_1.txt
http://www.squid-cache.org/Versions/v2/2.6/changesets/11349.patch
http://www.ubuntu.com/usn/usn-441-1
http://www.vupen.com/english/advisories/2007/1035
https://exchange.xforce.ibmcloud.com/vulnerabilities/33124
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10291
http://secunia.com/advisories/24611
http://secunia.com/advisories/24614
http://secunia.com/advisories/24625
http://secunia.com/advisories/24662
http://secunia.com/advisories/24911
http://security.gentoo.org/glsa/glsa-200703-27.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:068
http://www.novell.com/linux/security/advisories/2007_5_sr.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-1560