CVE-2010-2951
- State
- Published
- Severity
- Not scored
- Published
- Oct 12, 2010
- Updated
- Aug 7, 2024
- Reserved
- Aug 4, 2010
Description
dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via vectors that trigger an IPv4 DNS response with the TC bit set.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20100825 Re: CVE Request -- Squid v3.1.6 -- DoS (crash) while processing large DNS replies with no IPv6 resolver presentmailing-list
- [oss-security] 20100825 Re: CVE Request -- Squid v3.1.6 -- DoS (crash) while processing large DNS replies with no IPv6 resolver presentmailing-list
- http://bugs.squid-cache.org/show_bug.cgi?id=3009
- [squid-users] 20100824 Squid 3.1.7 is availablemailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=626927
- http://bugs.squid-cache.org/show_bug.cgi?id=3021
- http://bazaar.launchpad.net/~squid/squid/3.1/revision/10072
- http://bugs.gentoo.org/show_bug.cgi?id=334263
- [oss-security] 20100824 CVE Request -- Squid v3.1.6 -- DoS (crash) while processing large DNS replies with no IPv6 resolver presentmailing-list
- [oss-security] 20100825 Re: CVE Request -- Squid v3.1.6 -- DoS (crash) while processing large DNS replies with no IPv6 resolver presentmailing-list
- http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10072.patch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.