A buffer overread flaw was found in the way Squid proxy caching server processed large DNS replies in cases, when no IPv6 resolver was present. A remote attacker could provide DNS reply with large amount of data, leading to denial of service (squid server crash).
Upstream bug report: [1] http://bugs.squid-cache.org/showbug.cgi?id=3021
Relevant upstream changeset: [2] http://bazaar.launchpad.net/~squid/squid/3.1/revision/10072
References: [3] http://marc.info/?l=squid-users&m=128263555724981&w=2 [4] http://bugs.gentoo.org/showbug.cgi?id=334263
CVE Request: [5] http://www.openwall.com/lists/oss-security/2010/08/24/6