CVE-2007-6239 json
The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial…
published 2007-12-04 18 y ago modified 2026-06-16 4 mo ago also EUVD-2007-6207
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 26.7%
- EPSS 26.7% chance of exploitation in 30 days, percentile 98%
- public exploits
- 0
- none known
Summary
The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.
Patch / fix
- squid Debian 14, Debian 13, Debian 12 2.6.17-1
debian advisories DEBIAN-CVE-2007-6239
- squid RHEL 2.1 7:2.4.STABLE7-1.21as.11
- squid RHEL 3 7:2.5.STABLE3-8.3E
- squid RHEL 4 7:2.5.STABLE14-1.4E.el4_6.1
- squid RHEL 5 7:2.6.STABLE6-5.el5_1.2
red hat advisories RHSA-2007:1130
- securityfocus.com/bid/26687 patch
- debian.org/security/2008/dsa-1482 advisory
- redhat.com/support/errata/RHSA-2007-1130.html advisory
- squid-cache.org/Advisories/SQUID-2007_2.txt advisory
- secunia.com/advisories/27910 advisory
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2007-6239 updated
squid: DoS in cache updates
-
Red Hat Desktop version 3 squid 2.5.STABLE3-8.3E Red Hat Enterprise Linux (v. 5 server) squid 2.6.STABLE6-5.el5_1.2 Red Hat Enterprise Linux AS (Advanced Server) version 2.1 squid 2.4.STABLE7-1.21as.11 Red Hat Enterprise Linux AS version 3 squid 2.5.STABLE3-8.3E Red Hat Enterprise Linux AS version 4 squid 2.5.STABLE14-1.4E.el4_6.1 Red Hat Enterprise Linux Desktop version 4 squid 2.5.STABLE14-1.4E.el4_6.1fixed: vendor fix RHSA-2007:1130
+7 more productsfewer
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) squid 2.6.STABLE6-5.el5_1.2 Red Hat Enterprise Linux ES version 2.1 squid 2.4.STABLE7-1.21as.11 Red Hat Enterprise Linux ES version 3 squid 2.5.STABLE3-8.3E Red Hat Enterprise Linux ES version 4 squid 2.5.STABLE14-1.4E.el4_6.1 Red Hat Enterprise Linux WS version 3 squid 2.5.STABLE3-8.3E Red Hat Enterprise Linux WS version 4 squid 2.5.STABLE14-1.4E.el4_6.1 Red Hat Linux Advanced Workstation 2.1 squid 2.4.STABLE7-1.21as.11
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
26.66% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- squid-cache.org http://www.squid-cache.org/Versions/v2/2.6/changesets/11780.patch referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
debian.org
/security/2008/dsa-1482
vendor-advisory, patch
-
redhat.com
/support/errata/RHSA-2007-1130.html
vendor-advisory, patch
-
securityfocus.com
/bid/26687
vdb-entry, patch
-
squid-cache.org
/Advisories/SQUID-2007_2.txt
patch, vendor-advisory
-
secunia.com
/advisories/27910
third-party-advisory, patch, vendor-advisory
-
squid-cache.org
/Versions/v2/2.6/changesets/11780.patch
exploit, vendor-advisory
-
redhat.com
/archives/fedora-package-announce/2007-December/msg00507.html
vendor-advisory
-
security.gentoo.org
/glsa/glsa-200903-38.xml
vendor-advisory
-
mandriva.com
/security/advisories?name=MDVSA-2008:002
vendor-advisory
-
security.gentoo.org
/glsa/glsa-200801-05.xml
vendor-advisory
-
redhat.com
/archives/fedora-package-announce/2007-December/msg00497.html
vendor-advisory
-
ubuntu.com
/usn/usn-565-1
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2008-01/msg00002.html
vendor-advisory
-
secunia.com
/advisories/28091
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/28412
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/28814
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/28109
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/28403
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2007/4066
vdb-entry, vendor-advisory
-
secunia.com
/advisories/28350
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/28381
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/34467
third-party-advisory, vendor-advisory
-
kb.cert.org
/vuls/id/232881
third-party-advisory, us-government-resource
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10915
vdb-entry, signature
- bugzilla.redhat.com /show_bug.cgi?id=410181
-
securitytracker.com
/id?1019036
vdb-entry
- bugs.gentoo.org /show_bug.cgi?id=201209
Sources
- CVE List CVE-2007-6239
- NVD CVE-2007-6239
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.