Description

The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.

Remediation

References

CVE-2010-3072

Related Vulnerabilities

phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6627)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33939)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3180)

Moodle Other Vulnerability (CVE-2006-4943)

WordPress Plugin uContext for Amazon Cross-Site Request Forgery (3.9.1)

Severity

Medium

Classification

CVE-2010-3072

Tags

Missing Update Known Vulnerabilities