Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Gentoo Linux: Normal Advisory on Squid Denial of Service Issue

gentoo
Calendar Grey January 9, 2008
Scroller Gentoo
An exploit in Apache Tomcat may lead to service interruptions. To safeguard your application, ensure that you are using the most recent version.
A Denial of Service vulnerability has been reported in Squid.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200801-05
                                            https://security.gentoo.org/

  Severity: Normal
     Title: Squid: Denial of Service
      Date: January 09, 2008
      Bugs: #201209
        ID: 200801-05


Synopsis
=======
A Denial of Service vulnerability has been reported in Squid.

Background
=========
Squid is a multi-protocol proxy server.

Affected packages
================
    -------------------------------------------------------------------
     Package          /  Vulnerable  /                      Unaffected
    -------------------------------------------------------------------
  1  net-proxy/squid      < 2.6.17                           >= 2.6.17

==========
The Wikimedia Foundation reported a memory leak vulnerability when
performing cache updates.

Impact
=====
A remote attacker could perform numerous specially crafted requests to
the vulnerable server, resulti...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory denial of service gentoo memory leak squid

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory denial of service gentoo memory leak squid

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround