5

CVE-2007-1560

The clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of service (daemon crash) via crafted TRACE requests that trigger an assertion error.

Data is provided by the National Vulnerability Database (NVD)
SquidSquid Version2.6.stable1
SquidSquid Version2.6.stable2
SquidSquid Version2.6.stable3
SquidSquid Version2.6.stable4
SquidSquid Version2.6.stable5
SquidSquid Version2.6.stable6
SquidSquid Version2.6.stable7
SquidSquid Version2.6.stable8
SquidSquid Version2.6.stable9
SquidSquid Version2.6.stable10
SquidSquid Version2.6.stable11
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 63.98% 0.983
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P