Debian/squid: unknown

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers

Action: Upgrade squid to 2.6.18-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-1612#Debian:13/squid
• https://security-tracker.debian.org/tracker/CVE-2008-1612

published 2008-04-01T17:44:00Z · modified 2026-10-23T17:47:34.005097758Z · JSON