Squid < 3.0STABLE23 / 3.1.x < Remote DoS

Medium Nessus Network Monitor Plugin ID 5332


The remote host is vulnerable to a Denial of Service (Dos) attack.


According to its banner, the version of Squid proxy caching server installed on the remote host is 2.x or 3.x earlier than 3.0.STABLE23 or Such versions reportedly use incorrect data validation when processing specially crafted DNS packets. An attacker, exploiting this flaw, could cause a short term denial of service.


Either upgrade to Squid version 3.0.STABLE23 or or later, or apply the patch referenced in the project's advisory above.

See Also





Plugin Details

Severity: Medium

ID: 5332

Family: Web Servers

Published: 2010/02/02

Updated: 2019/03/06

Dependencies: 3389

Nessus ID: 44384

Risk Information

Risk Factor: Medium

CVSS v2.0

Base Score: 5

Temporal Score: 4.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

CVSS v3.0

Base Score: 5.3

Temporal Score: 4.9

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:squid-cache:squid

Patch Publication Date: 2010/02/01

Vulnerability Publication Date: 2010/01/29

Reference Information

CVE: CVE-2010-0308

BID: 37522