CVE-2007-1560

Publication date 21 March 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
squid 7.04 feisty
Fixed 2.6.5-4ubuntu2
6.10 edgy
Fixed 2.6.1-3ubuntu1.3
6.06 LTS dapper
Not affected

References

Related Ubuntu Security Notices (USN)

    • USN-441-1
    • Squid vulnerability
    • 26 March 2007

Other references