Skip to content
OpenAdvisories
Unscored DSA-1991-1 2 CVEs

squid squid3 - denial of service

Published Feb 4, 2010 · Updated Mar 9, 2026

Fixed packages 4

ReleasePackageFixed in
Debian · 4.0 squid 2.6.5-6etch5
Debian · 4.0 squid3 3.0.PRE5-5+etch2
Debian · 5.0 squid 2.7.STABLE3-4.1lenny1
Debian · 5.0 squid3 3.0.STABLE8-3+lenny3

Vulnerabilities 2

  • Unscored —
    CVE-2009-2855 EPSS 34%

    The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2010-0308 EPSS 28%

    lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denia…