CVE-2008-1612 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2008-1612
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-1612

Description: The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/41586 UBUNTU http://www.ubuntu.com/usn/usn-601-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html SAID Secunia Advisory: SA30032 Secunia Advisory: SA32109 Secunia Advisory: SA29813 Secunia Advisory: SA27477 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0214.html MLIST http://marc.info/?l=squid-announce&m=120614453813157&w=2 http://www.openwall.com/lists/oss-security/2008/04/01/5 MISC http://www.squid-cache.org/Versions/v2/2.6/changesets/11882.patch MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:134 FEDORA DEBIAN http://www.debian.org/security/2008/dsa-1646 CONFIRM http://www.squid-cache.org/Advisories/SQUID-2007_2.txt BID 28693

Return to the previous page.