| Package | Affected versions | Patched versions |
|---|---|---|
| squid | = 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7≤ 3.5.15 |
Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free