diff options
| author | Xin LI <delphij@FreeBSD.org> | 2010-02-01 20:25:56 +0000 |
|---|---|---|
| committer | Xin LI <delphij@FreeBSD.org> | 2010-02-01 20:25:56 +0000 |
| commit | 3f1f30c23cda585563454fb498ac259e17574cae (patch) | |
| tree | 38469f4408c33b32ddddfd1d7d7c94397644d922 /security | |
| parent | fb1abdada31c5af07bdb7fb90f018e9199a4c85f (diff) | |
| download | ports-3f1f30c23cda585563454fb498ac259e17574cae.tar.gz ports-3f1f30c23cda585563454fb498ac259e17574cae.zip | |
Notes
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index b73bd29c4167..20b774cfff51 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,37 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="296ecb59-0f6b-11df-8bab-0019996bc1f7"> + <topic>squid -- Denial of Service vulnerability in DNS handling</topic> + <affects> + <package> + <name>squid</name> + <range><ge>2.7.1</ge><lt>2.7.7_3</lt></range> + <range><ge>3.0.1</ge><lt>3.0.22</lt></range> + <range><ge>3.1.0.1</ge><lt>3.1.0.16</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Squid security advisory 2010:1 reports:</p> + <blockquote cite="http://www.squid-cache.org/Advisories/SQUID-2010_1.txt"> + <p>Due to incorrect data validation Squid is vulnerable to a denial + of service attack when processing specially crafted DNS packets.</p> + <p>This problem allows any trusted client or external server who can + determine the squid receiving port to perform a short-term denial + of service attack on the Squid service.</p> + </blockquote> + </body> + </description> + <references> + <url>http://www.squid-cache.org/Advisories/SQUID-2010_1.txt</url> + </references> + <dates> + <discovery>2010-01-14</discovery> + <entry>2010-02-01</entry> + </dates> + </vuln> + <vuln vid="696053c6-0f50-11df-a628-001517351c22"> <topic>bugzilla -- information leak</topic> <affects> |