VULNERABILITY INTELLIGENCE

CVE-2007-6239

CVSS score5 MEDIUM
EPSS probability26.66%
CISA KEVNot currently listed
Published2007-12-04
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references