Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 519
Alerts This Week
Warning Icon 1 519

Ubuntu 14.04 LTS & 14.10 USN-2422-1 Moderate: Squid Denial Of Service

ubuntu
Calendar Grey November 25, 2014
Dist Ubuntu Esm H88
A flaw in Squid may lead to a system failure due to specially crafted network packets on Ubuntu deployments. It's crucial to apply the latest updates to minimize vulnerabilities.
Squid could be made to crash if it received specially crafted network traffic.

Summary

Squid could be made to crash if it received specially crafted network

traffic.

Software Description:

- squid3: Web proxy cache server

Details:

Sebastian Krahmer discovered that the Squid pinger incorrectly handled

certain malformed ICMP packets. A remote attacker could possibly use this

issue to cause Squid to crash, resulting in a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu moderate severity squid network issue security notice

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.10:
  squid3                          3.3.8-1ubuntu8.1

Ubuntu 14.04 LTS:
  squid3                          3.3.8-1ubuntu6.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2422-1

CVE-2014-7141, CVE-2014-7142

November 25, 2014

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu moderate severity squid network issue security notice

Package Information

https://launchpad.net/ubuntu/+source/squid3/3.3.8-1ubuntu8.1
https://launchpad.net/ubuntu/+source/squid3/3.3.8-1ubuntu6.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.