REDHAT-BUG-484246
First published: Thu Feb 05 2009(Updated: )
A denial of service flaw was found in the way squid handles certain client initiated requests. A client who can connect to the squid server could leverage this flaw to cause the squid child process to terminate. This would prevent anyone from using the squid server until the process automatically restarts.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Squid Web Proxy Cache |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://admin.fedoraproject.org/updates/squid-3.0.STABLE13-1.fc10
- https://admin.fedoraproject.org/updates/squid-3.0.STABLE13-1.fc9
- http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0478
- https://admin.fedoraproject.org/updates/F10/FEDORA-2009-1526
- https://admin.fedoraproject.org/updates/F9/FEDORA-2009-1517
- https://bugzilla.redhat.com/show_bug.cgi?id=484246
Frequently Asked Questions
What is the severity of REDHAT-BUG-484246?
The severity of REDHAT-BUG-484246 is classified as a denial of service vulnerability.
How do I fix REDHAT-BUG-484246?
To fix REDHAT-BUG-484246, you should update to the latest version of the Squid software that addresses this vulnerability.
Who is affected by REDHAT-BUG-484246?
Any user of the Squid Web Proxy Cache who allows client connections is potentially affected by REDHAT-BUG-484246.
What symptoms indicate REDHAT-BUG-484246 is being exploited?
If you notice that your Squid child processes are unexpectedly terminating, it may indicate exploitation of REDHAT-BUG-484246.
Is there a workaround for REDHAT-BUG-484246 until a fix is applied?
Currently, there are no recommended workarounds to mitigate the effects of REDHAT-BUG-484246 other than applying the software update.
- collector/redhat-bugzilla
- alias/CVE-2009-0478
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/description
- agent/tags
- agent/softwarecombine
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/squid
- canonical/squid web proxy cache