dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via vectors that trigger an IPv4 DNS response with the TC bit set.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2010-10-12T20:00:00Z
Updated: 2024-08-07T02:55:45.461Z
Reserved: 2010-08-04T00:00:00Z
Link: CVE-2010-2951
Vulnrichment
No data.
NVD
Status : Modified
Published: 2010-10-12T21:00:01.710
Modified: 2024-11-21T01:17:43.283
Link: CVE-2010-2951
Redhat