CVE-2007-1560: Medium severity Squid Squid vulnerability
Published Mar 21, 2007
·Updated
The clientProcessRequest() function in src/clientside.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.
Affected Software
11 affected components
Squid Squid=2.6.stable1
Squid Squid=2.6.stable2
Squid Squid=2.6.stable3
Squid Squid=2.6.stable4
Squid Squid=2.6.stable5
Squid Squid=2.6.stable6
Squid Squid=2.6.stable7
Squid Squid=2.6.stable8
Squid Squid=2.6.stable9
Squid Squid=2.6.stable10
Squid Squid=2.6.stable11
Remediation
Patch Available
Patch Available
Event History
Mar 21, 2007
CVE Published
06:19 PM
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1560?
CVE-2007-1560 is classified as a high severity vulnerability due to its ability to cause a denial of service through a daemon crash.
2
How do I fix CVE-2007-1560?
To mitigate CVE-2007-1560, upgrade to Squid version 2.6.STABLE12 or later.
3
What effect does CVE-2007-1560 have on my system?
CVE-2007-1560 allows remote attackers to exploit crafted TRACE requests, leading to potential service interruptions.
4
In which versions of Squid is CVE-2007-1560 found?
CVE-2007-1560 affects Squid versions 2.6.STABLE1 through 2.6.STABLE11.
5
What attack vector is used in CVE-2007-1560?
CVE-2007-1560 leverages malformed TRACE requests to trigger an assertion error in the Squid daemon.