CVE-2010-3072: Squid-Cache Squid

Medium severity, CVSS 5.0. EPSS: 59.9% chance of exploitation in the next 30 days.

The string-comparison functions in String.cci in Squid 3.x before 3.1.8 and 3.2.x before 3.2.0.2 allow remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request.

Affected products

• Squid-Cache Squid: version 3.0 only; version 3.0.stable1 only; version 3.0.stable2 only; version 3.0.stable3 only; version 3.0.stable4 only; version 3.0.stable5 only; …

Published 2010-09-20. Last modified 2026-06-16.