CVE-2010-0639

描述

The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.

如何修補 CVE-2010-0639

要修補 CVE-2010-0639,請將受影響套件升級到下列已修補版本。

• Debian/squid—升級至 2.7.STABLE8-1 或更新版本

CVE-2010-0639 正在被利用嗎?

中等 — EPSS 為 30.6%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 2.7.STABLE8-1

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2010-0639