CVE-2007-6239: Squid Web Proxy Cache

Medium severity, CVSS 5.0. EPSS: 26.7% chance of exploitation in the next 30 days.

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

Affected products

• Squid Squid Web Proxy Cache: version 2.0_patch2 only; version 2.1_patch2 only; version 2.3.stable4 only; version 2.3.stable5 only; version 2.4_stable2 only; version 2.4_stable4 only; …

Published 2007-12-04. Last modified 2026-06-16.