Every CVE Search/ Get API key

CVE-2007-6239

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0...

5.0 MediumFix available

CVE-2007-6239 is a medium vulnerability (CVSS 5.0) in Squid Web Proxy Cache, published December 4, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 26.7%, the 98th percentile. Fixed in squid 2.6.17-1.

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

Exploit likelihood

26.7%Up 22.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

Record
CVE-2007-6239
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

Record
CVE-2007-6239
Updated
2026-11-02
EUVDEUVD-2007-6207 No score

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

Record
EUVD-2007-6207
Updated
2026-11-03
GitHub AdvisoriesGHSA-6pw6-cgf2-h2v8 No score

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0...

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

Record
GHSA-6pw6-cgf2-h2v8
Weakness
CWE-20
Updated
2026-11-02
OSV No score

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

Record
CVE-2007-6239
Updated
2026-11-02
OSVDEBIAN-CVE-2007-6239 No score

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

Record
DEBIAN-CVE-2007-6239
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
squid
Debian:12
 before 2.6.17-1
2.6.17-1
squid
Debian:13
 before 2.6.17-1
2.6.17-1
squid
Debian:14
 before 2.6.17-1
2.6.17-1
squid
Debian:4.0
 before 2.6.5-6etch1, plus listed versions
2.6.5-6
2.6.5-6etch1
squid
Debian:4.0
 before 2.6.5-6etch4, plus listed versions
2.6.5-62.6.5-6etch12.6.5-6etch2
2.6.5-6etch4
squid
Red Hat:enterprise_linux:2.1::as
 before 7:2.4.STABLE7-1.21as.11
7:2.4.STABLE7-1.21as.11
squid
Red Hat:enterprise_linux:2.1::aw
 before 7:2.4.STABLE7-1.21as.11
7:2.4.STABLE7-1.21as.11
squid
Red Hat:enterprise_linux:2.1::es
 before 7:2.4.STABLE7-1.21as.11
7:2.4.STABLE7-1.21as.11
squid
Red Hat:enterprise_linux:3::as
 before 7:2.5.STABLE3-8.3E
7:2.5.STABLE3-8.3E
squid-debuginfo
Red Hat:enterprise_linux:3::as
 before 7:2.5.STABLE3-8.3E
7:2.5.STABLE3-8.3E
Show 18 moreShow less
Affected packages
PackageAffectedFixed
squid
Red Hat:enterprise_linux:3::desktop
 before 7:2.5.STABLE3-8.3E
7:2.5.STABLE3-8.3E
squid-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 7:2.5.STABLE3-8.3E
7:2.5.STABLE3-8.3E
squid
Red Hat:enterprise_linux:3::es
 before 7:2.5.STABLE3-8.3E
7:2.5.STABLE3-8.3E
squid-debuginfo
Red Hat:enterprise_linux:3::es
 before 7:2.5.STABLE3-8.3E
7:2.5.STABLE3-8.3E
squid
Red Hat:enterprise_linux:3::ws
 before 7:2.5.STABLE3-8.3E
7:2.5.STABLE3-8.3E
squid-debuginfo
Red Hat:enterprise_linux:3::ws
 before 7:2.5.STABLE3-8.3E
7:2.5.STABLE3-8.3E
squid
Red Hat:enterprise_linux:4::as
 before 7:2.5.STABLE14-1.4E.el4_6.1
7:2.5.STABLE14-1.4E.el4_6.1
squid-debuginfo
Red Hat:enterprise_linux:4::as
 before 7:2.5.STABLE14-1.4E.el4_6.1
7:2.5.STABLE14-1.4E.el4_6.1
squid
Red Hat:enterprise_linux:4::desktop
 before 7:2.5.STABLE14-1.4E.el4_6.1
7:2.5.STABLE14-1.4E.el4_6.1
squid-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 7:2.5.STABLE14-1.4E.el4_6.1
7:2.5.STABLE14-1.4E.el4_6.1
squid
Red Hat:enterprise_linux:4::es
 before 7:2.5.STABLE14-1.4E.el4_6.1
7:2.5.STABLE14-1.4E.el4_6.1
squid-debuginfo
Red Hat:enterprise_linux:4::es
 before 7:2.5.STABLE14-1.4E.el4_6.1
7:2.5.STABLE14-1.4E.el4_6.1
squid
Red Hat:enterprise_linux:4::ws
 before 7:2.5.STABLE14-1.4E.el4_6.1
7:2.5.STABLE14-1.4E.el4_6.1
squid-debuginfo
Red Hat:enterprise_linux:4::ws
 before 7:2.5.STABLE14-1.4E.el4_6.1
7:2.5.STABLE14-1.4E.el4_6.1
squid
Red Hat:enterprise_linux:5::client_workstation
 before 7:2.6.STABLE6-5.el5_1.2
7:2.6.STABLE6-5.el5_1.2
squid-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 7:2.6.STABLE6-5.el5_1.2
7:2.6.STABLE6-5.el5_1.2
squid
Red Hat:enterprise_linux:5::server
 before 7:2.6.STABLE6-5.el5_1.2
7:2.6.STABLE6-5.el5_1.2
squid-debuginfo
Red Hat:enterprise_linux:5::server
 before 7:2.6.STABLE6-5.el5_1.2
7:2.6.STABLE6-5.el5_1.2

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02affected, aliases, facts, references, titleGitHub Advisories, OSV
2026-11-02createdCVE List, NVD

References

Show 29 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open