Description

dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via vectors that trigger an IPv4 DNS response with the TC bit set.

Remediation

References

CVE-2010-2951

Related Vulnerabilities

Atlassian Jira Improper Authentication Vulnerability (CVE-2021-39119)

Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-28169)

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.36)

WordPress Plugin Rating-Widget:Star Review System Multiple Cross-Site Scripting Vulnerabilities (1.3.1)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0192)

Severity

Medium

Classification

CVE-2010-2951

Tags

Missing Update Known Vulnerabilities