CVE-2010-2951: Medium severity Squid-Cache Squid vulnerability
A buffer overread flaw was found in the way Squid proxy caching server processed large DNS replies in cases, when no IPv6 resolver was present. A remote attacker could provide DNS reply with large amount of data, leading to denial of service (squid server crash).
Upstream bug report: [1] http://bugs.squid-cache.org/showbug.cgi?id=3021
Relevant upstream changeset: [2] http://bazaar.launchpad.net/~squid/squid/3.1/revision/10072
References: [3] http://marc.info/?l=squid-users&m=128263555724981&w=2 [4] http://bugs.gentoo.org/showbug.cgi?id=334263
CVE Request: [5] http://www.openwall.com/lists/oss-security/2010/08/24/6
Other sources
dnsinternal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via vectors that trigger an IPv4 DNS response with the TC bit set.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2951?
CVE-2010-2951 is considered a moderate severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2010-2951?
To fix CVE-2010-2951, you should upgrade Squid to a patched version that addresses the buffer overread flaw.
What versions of Squid are affected by CVE-2010-2951?
CVE-2010-2951 specifically affects Squid version 3.1.6.
What type of vulnerability is CVE-2010-2951?
CVE-2010-2951 is a buffer overread vulnerability occurring in the processing of large DNS replies.
Can CVE-2010-2951 be exploited remotely?
Yes, CVE-2010-2951 can be exploited remotely by an attacker sending crafted DNS replies to a vulnerable Squid server.