Vulnerability in Squid

CVE-2007-1560

The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.

EPSS: 0.275 (97.9th percentile) — read the EPSS interpretation.

Affected products

  • Squid — versions 2.6.stable1, 2.6.stable2, 2.6.stable3
  • N/a — versions n/a

References