Squid 3.0 through 3.0.STABLE16 and 3.1 through 3.1.0.11 does not properly enforce "buffer limits and related bound checks," which allows remote attackers to cause a denial of service via (1) an incomplete request or (2) a request with a large header size, related to (a) HttpMsg.cc and (b) client_side.cc.

The remote host is affected by the vulnerability described in GLSA-201110-24 (Squid: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Squid. Please review       the CVE identifiers referenced below for details.
  Impact :

    Remote unauthenticated attackers may be able to execute arbitrary code       with the privileges of the Squid process or cause a Denial of Service.
  Workaround :

    There is no known workaround at this time.

The following vulnerabilities have been fixed in squid :

  - DoS via special crafted auth header. (CVE-2009-2855)

  - DoS via invalid DoS header. (CVE-2010-0308)

The following vulnerabilities have been fixed in squid :

  - CVE-2009-2855: DoS via special crafted auth header

  - CVE-2010-0308: DoS via invalid DoS header

  - CVE-2009-2622: DoS in squid3 via broken HTTP handling

  - CVE-2009-2621: DoS in squid3 via not enforced 'buffer     limits and related bound checks'

Fixes several denial of service issues which could allow an attacker to stop the Squid service. CVE-2009-2621, CVE-2009-2622

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the version of the Squid proxy caching server installed on the remote host is older than 3.0.STABLE17 or 3.1.0.12.  Such versions reportedly use incorrect bounds checking when processing some requests or responses.  Squid-2.x releases are not vulnerable.

According to its banner, the version of the Squid proxy caching server installed on the remote host is older than 3.0.STABLE17 or 3.1.0.12.
Such versions reportedly use incorrect bounds checking when processing some requests or responses.

Squid-2.x releases are not vulnerable.

Multiple vulnerabilities has been found and corrected in squid :

Due to incorrect buffer limits and related bound checks Squid is vulnerable to a denial of service attack when processing specially crafted requests or responses (CVE-2009-2621).

Due to incorrect data validation Squid is vulnerable to a denial of service attack when processing specially crafted responses (CVE-2009-2622).

This update provides fixes for these vulnerabilities.

Update :

Additional upstream security patches were applied :

Debug warnings fills up the logs.

Upstream Bug 2728: regression: assertion failed: http.cc:705: !eof

Squid security advisory 2009:2 reports :

Due to incorrect buffer limits and related bound checks Squid is vulnerable to a denial of service attack when processing specially crafted requests or responses.

Due to incorrect data validation Squid is vulnerable to a denial of service attack when processing specially crafted responses.

These problems allow any trusted client or external server to perform a denial of service attack on the Squid service.

Squid-2.x releases are not affected.

ID	Name	Product	Family	Severity
56658	GLSA-201110-24 : Squid: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
45131	SuSE 11 Security Update : squid (SAT Patch Number 2143)	Nessus	SuSE Local Security Checks	medium
45129	openSUSE Security Update : squid (squid-2144)	Nessus	SuSE Local Security Checks	medium
45127	openSUSE Security Update : squid (squid-2144)	Nessus	SuSE Local Security Checks	medium
45126	openSUSE Security Update : squid (squid-2144)	Nessus	SuSE Local Security Checks	medium
40628	Fedora 10 : squid-3.0.STABLE18-1.fc10 (2009-8327)	Nessus	Fedora Local Security Checks	medium
40627	Fedora 11 : squid-3.0.STABLE18-1.fc11 (2009-8324)	Nessus	Fedora Local Security Checks	medium
801034	Squid 3.0.STABLE16 / 3.10.11 Remote DoS	Log Correlation Engine	Web Servers	medium
5108	Squid 3.x < 3.0.STABLE18 / 3.1.x < 3.1.0.13 DoS	Nessus Network Monitor	Web Servers	medium
40420	Squid 3.0.STABLE16 / 3.10.11	Nessus	Firewalls	medium
40399	Mandriva Linux Security Advisory : squid (MDVSA-2009:161-1)	Nessus	Mandriva Local Security Checks	medium
40396	FreeBSD : squid -- several remote denial of service vulnerabilities (e1156e90-7ad6-11de-b26a-0048543d60ce)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2009-2621

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium