Unrated severityNVD Advisory· Published Feb 3, 2010· Updated Apr 29, 2026
CVE-2010-0308
CVE-2010-0308
Description
lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.
Affected products
46cpe:2.3:a:squid-cache:squid:2.0:*:*:*:*:*:*:*+ 45 more
- cpe:2.3:a:squid-cache:squid:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:2.2:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:2.3:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:2.4:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:2.5:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:2.6:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:2.7:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable1:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable11:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable12:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable13:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable14:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable15:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable16:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable17:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable18:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable19:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable2:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable20:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable21:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable22:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable3:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable4:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable5:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable6:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable7:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable8:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.0.stable9:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9163.patchnvdPatch
- secunia.com/advisories/38451nvdVendor Advisory
- secunia.com/advisories/38455nvdVendor Advisory
- www.squid-cache.org/Advisories/SQUID-2010_1.txtnvdVendor Advisory
- www.vupen.com/english/advisories/2010/0260nvdVendor Advisory
- events.ccc.de/congress/2009/Fahrplan/attachments/1483_26c3_ipv4_fuckups.pdfnvd
- osvdb.org/62044nvd
- www.securityfocus.com/bid/37522nvd
- www.securitytracker.com/idnvd
- www.squid-cache.org/Versions/v2/HEAD/changesets/12597.patchnvd
- www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-9853.patchnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/56001nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11270nvd
News mentions
0No linked articles in our index yet.