[Fixed]SQUID-2009:1 (squid 3.0.x)

infwonder · **Posted:** Thu Feb 05, 2009 12:18 pm

This is a remote DoS issue reported in Squid.

quid Proxy Cache Security Update Advisory SQUID-2009:1 wrote:

Problem Description:

Due to an internal error Squid is vulnerable to a denial
of service attack when processing specially crafted requests.

Severity:

This problem allows any client to perform a denial of service
attack on the Squid service.

Updated Packages:

This bug is fixed by Squid versions 2.7.STABLE6, 3.0.STABLE13,
and 3.1.0.5.

In addition, patches addressing this problem can be found In
our patch archives:

Squid 2.7:
http://www.squid-cache.org/Versions/v2/ ... 2432.patch
http://www.squid-cache.org/Versions/v2/ ... 2442.patch

Squid 3.0:
http://www.squid-cache.org/Versions/v3/ ... 8964.patch
http://www.squid-cache.org/Versions/v3/ ... 8965.patch

Squid 3.1:
http://www.squid-cache.org/Versions/v3/ ... 9414.patch
http://www.squid-cache.org/Versions/v3/ ... 9418.patch

If you are using a prepackaged version of Squid then please refer
to the package vendor for availability information on updated
packages.

Patches against different versions of squid release can be found in above post. We currently have version 3.0.6 in both types of repo.

References:
http://www.squid-cache.org/Advisories/SQUID-2009_1.txt
http://secunia.com/Advisories/33731/

!8!

guth · **Joined:** Sat Mar 18, 2006 1:13 pm **Posts:** 1182

3.0-stable13->fifo

infwonder · **Posted:** Fri Feb 06, 2009 10:54 am

Thank you!