Submitted by KeesCook on Thu, 2005-04-14 12:01
Referenced CVEs:
CAN-2005-0718
Description:
===========================================================
Ubuntu Security Notice USN-111-1 April 14, 2005
squid vulnerability
CAN-2005-0718
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 4.10 (Warty Warthog)
The following packages are affected:
squid
The problem can be corrected by upgrading the affected package to
version 2.5.5-6ubuntu0.7. In general, a standard system upgrade is
sufficient to effect the necessary changes.
Details follow:
A remote Denial of Service vulnerability has been discovered in Squid.
If the remote end aborted the connection during a PUT or POST request,
Squid tried to free an already freed part of memory, which eventually
caused the server to crash.


