CVE-2010-3072: Null Pointer Dereference
A denial of service flaw was found in the way Squid proxy caching server internally processed NULL buffers. A remote, trusted client could use this flaw to cause squid daemon crash (dereference NULL pointer) when processing specially-crafted request.
References: [1] http://www.squid-cache.org/Advisories/SQUID-20103.txt
Upstream patch (against Squid v3.0): [2] http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9189.patch
Upstream patch (against Squid v3.1): [3] http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10090.patch
Credit: The vulnerability was discovered by Phil Oester.
Other sources
The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3072?
CVE-2010-3072 has a severity rating that indicates it can lead to a denial of service attack on the Squid proxy caching server.
How do I fix CVE-2010-3072?
To fix CVE-2010-3072, upgrade Squid to version 3.1.10 or later.
Which versions of Squid are affected by CVE-2010-3072?
CVE-2010-3072 affects Squid versions 3.0 and 3.1 prior to 3.1.10.
Can CVE-2010-3072 be exploited by unauthenticated users?
No, CVE-2010-3072 can only be exploited by a remote, trusted client.
What type of vulnerability is CVE-2010-3072?
CVE-2010-3072 is classified as a denial of service vulnerability.