Bug 386215

Summary:	net-proxy/squid: DoS vulnerability (CVE-2010-2951)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	net-proxy+disabled
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [glsa]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2011-10-08 01:08:33 UTC

CVE-2010-2951 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-2951):
  dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled,
  accesses an invalid socket during an IPv4 TCP DNS query, which allows remote
  attackers to cause a denial of service (assertion failure and daemon exit)
  via vectors that trigger an IPv4 DNS response with the TC bit set.

Comment 1 Tim Sammut (RETIRED) gentoo-dev

2011-10-23 03:50:38 UTC

Accoding to http://marc.info/?l=squid-users&m=128263555724981&w=2 this was fixed in squid 3.1.7. Moving to [glsa] with the other squid bugs.

Comment 2 GLSAMaker/CVETool Bot gentoo-dev

2011-10-26 20:48:17 UTC

This issue was resolved and addressed in
 GLSA 201110-24 at http://security.gentoo.org/glsa/glsa-201110-24.xml
by GLSA coordinator Tim Sammut (underling).