VULNERABILITY INTELLIGENCE

CVE-2010-0308

CVSS score4 MEDIUM
EPSS probability27.82%
CISA KEVNot currently listed
Published2010-02-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P

Description

lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references