Matthew Daley discovered that squid, a web proxy cache, does not properly perform input validation when parsing requests. A remote attacker could use this flaw to mount a denial of service attack, by sending specially crafted Range requests.

For the stable distribution (wheezy), this problem has been fixed in version 2.7.STABLE9-4.1+deb7u1. We recommend that you upgrade your squid packages.

This package provides the Squid Internet Object Cache developed by the National Laboratory for Applied Networking Research (NLANR) and Internet volunteers.

squid on Debian Linux

This check tests the installed software version using the apt package manager.

• http://www.debian.org/security/2015/dsa-3139.html

---

Updated on 2015-03-25