Skip to content
OpenAdvisories
Unscored DSA-1646-2 2 CVEs

squid - array bounds check

Published Oct 7, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 squid 2.6.5-6etch4

Vulnerabilities 2

  • Unscored —
    CVE-2007-6239 EPSS 27%

    The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attacker…

  • Unscored —

    The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exi…