Back to Database
Status published
Medium
CVE-2010-0308
lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through...
Vulnerability Description
lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-0308
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/38451
- http://secunia.com/advisories/38455
- http://osvdb.org/62044
- http://www.securityfocus.com/bid/37522
- http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-9853.patch
- http://www.squid-cache.org/Versions/v2/HEAD/changesets/12597.patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56001
- http://events.ccc.de/congress/2009/Fahrplan/attachments/1483_26c3_ipv4_fuckups.pdf
- http://www.squid-cache.org/Advisories/SQUID-2010_1.txt
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11270
- http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9163.patch
- http://www.securitytracker.com/id?1023520
- http://www.vupen.com/english/advisories/2010/0260
More from squid-cache
View All →CVE-2025-62168
Squid vulnerable to information disclosure via authentication credential leakage in error handling
Critical
10
CVE-2025-54574
Squid's URN Handling can lead to Buffer Overflow
Critical
9.3
CVE-2024-45802
Squid Denial of Service
High
7.5
CVE-2024-37894
Squid vulnerable to heap corruption in ESI assign
Medium
6.3
CVE-2024-25617
Denial of Service in HTTP Header parser in squid proxy
Medium
5.3
Affected Vendor
squid-cache
View all reports →Affected Software
squid
Vulnerable Versions:
2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 3.0, 3.0.stable1, 3.0.stable2, 3.0.stable3, 3.0.stable4, 3.0.stable5, 3.0.stable6, 3.0.stable7, 3.0.stable8, 3.0.stable9, 3.0.stable11, 3.0.stable12, 3.0.stable13, 3.0.stable14, 3.0.stable15, 3.0.stable16, 3.0.stable17, 3.0.stable18, 3.0.stable19, 3.0.stable20, 3.0.stable21, 3.0.stable22, 3.1, 3.1.0.1, 3.1.0.2, 3.1.0.3, 3.1.0.4, 3.1.0.5, 3.1.0.6, 3.1.0.7, 3.1.0.8, 3.1.0.9, 3.1.0.10, 3.1.0.11, 3.1.0.12, 3.1.0.13, 3.1.0.14, 3.1.0.15
Timeline
Official Publish:
February 3rd, 2010
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.