CVE-2010-0639: Squid-Cache Squid

Medium severity, CVSS 5.0. EPSS: 31.1% chance of exploitation in the next 30 days.

The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.

Affected products

• Squid-Cache Squid: version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only; version 2.5 only; …

Published 2010-02-15. Last modified 2026-06-16.