Description

The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.

Remediation

References

CVE-2010-3072

Related Vulnerabilities

Oracle Application Server Other Vulnerability (CVE-2006-5357)

Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-36260)

Moodle Credentials Management Errors Vulnerability (CVE-2012-0794)

WordPress Plugin YAWPP (Yet Another WordPress Petition Plugin) SQL Injection (1.2)

Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2018-18314)

Severity

Medium

Classification

CVE-2010-3072

Tags

Missing Update Known Vulnerabilities