CVE-2010-0308: Squid-Cache Squid

Medium severity, CVSS 4.0. EPSS: 27.8% chance of exploitation in the next 30 days.

lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header.

Affected products

• Squid-Cache Squid: version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only; version 2.5 only; …

Published 2010-02-03. Last modified 2026-06-16.