tocsin

Debian/squid: unknown

The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth header with certain comma delimiters that trigger an infinite

Action: Upgrade squid to 2.7.STABLE7-1 or later.

Affected

introducedfixedlast affected
02.7.STABLE7-1-

Fixed versions

2.7.STABLE7-1

Sources

published · modified · JSON