Every CVE Search/ Get API key

CVE-2008-1612

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial...

4.3 MediumFix available

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239.

Exploit likelihood

2.18%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239.

Record
CVE-2008-1612
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239.

Record
CVE-2008-1612
Updated
2026-11-02
EUVDEUVD-2008-1613 No score

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239.

Record
EUVD-2008-1613
Updated
2026-11-03
GitHub AdvisoriesGHSA-qcwf-4hxx-vx9v No score

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial...

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239.

Record
GHSA-qcwf-4hxx-vx9v
Weakness
CWE-20
Updated
2026-11-02
OSV No score

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239.

Record
CVE-2008-1612
Updated
2026-11-02
OSVDEBIAN-CVE-2008-1612 No score

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239.

Record
DEBIAN-CVE-2008-1612
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
squid
Debian:12
 before 2.6.18-1
2.6.18-1
squid
Debian:13
 before 2.6.18-1
2.6.18-1
squid
Debian:14
 before 2.6.18-1
2.6.18-1
squid
Debian:4.0
 before 2.6.5-6etch4, plus listed versions
2.6.5-62.6.5-6etch12.6.5-6etch2
2.6.5-6etch4
squid
Red Hat:enterprise_linux:2.1::as
 before 7:2.4.STABLE7-1.21as.12
7:2.4.STABLE7-1.21as.12
squid
Red Hat:enterprise_linux:2.1::aw
 before 7:2.4.STABLE7-1.21as.12
7:2.4.STABLE7-1.21as.12
squid
Red Hat:enterprise_linux:2.1::es
 before 7:2.4.STABLE7-1.21as.12
7:2.4.STABLE7-1.21as.12
squid
Red Hat:enterprise_linux:3::as
 before 7:2.5.STABLE3-9.3E
7:2.5.STABLE3-9.3E
squid-debuginfo
Red Hat:enterprise_linux:3::as
 before 7:2.5.STABLE3-9.3E
7:2.5.STABLE3-9.3E
squid
Red Hat:enterprise_linux:3::desktop
 before 7:2.5.STABLE3-9.3E
7:2.5.STABLE3-9.3E
Show 17 moreShow less
Affected packages
PackageAffectedFixed
squid-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 7:2.5.STABLE3-9.3E
7:2.5.STABLE3-9.3E
squid
Red Hat:enterprise_linux:3::es
 before 7:2.5.STABLE3-9.3E
7:2.5.STABLE3-9.3E
squid-debuginfo
Red Hat:enterprise_linux:3::es
 before 7:2.5.STABLE3-9.3E
7:2.5.STABLE3-9.3E
squid
Red Hat:enterprise_linux:3::ws
 before 7:2.5.STABLE3-9.3E
7:2.5.STABLE3-9.3E
squid-debuginfo
Red Hat:enterprise_linux:3::ws
 before 7:2.5.STABLE3-9.3E
7:2.5.STABLE3-9.3E
squid
Red Hat:enterprise_linux:4::as
 before 7:2.5.STABLE14-1.4E.el4_6.2
7:2.5.STABLE14-1.4E.el4_6.2
squid-debuginfo
Red Hat:enterprise_linux:4::as
 before 7:2.5.STABLE14-1.4E.el4_6.2
7:2.5.STABLE14-1.4E.el4_6.2
squid
Red Hat:enterprise_linux:4::desktop
 before 7:2.5.STABLE14-1.4E.el4_6.2
7:2.5.STABLE14-1.4E.el4_6.2
squid-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 7:2.5.STABLE14-1.4E.el4_6.2
7:2.5.STABLE14-1.4E.el4_6.2
squid
Red Hat:enterprise_linux:4::es
 before 7:2.5.STABLE14-1.4E.el4_6.2
7:2.5.STABLE14-1.4E.el4_6.2
squid-debuginfo
Red Hat:enterprise_linux:4::es
 before 7:2.5.STABLE14-1.4E.el4_6.2
7:2.5.STABLE14-1.4E.el4_6.2
squid
Red Hat:enterprise_linux:4::ws
 before 7:2.5.STABLE14-1.4E.el4_6.2
7:2.5.STABLE14-1.4E.el4_6.2
squid-debuginfo
Red Hat:enterprise_linux:4::ws
 before 7:2.5.STABLE14-1.4E.el4_6.2
7:2.5.STABLE14-1.4E.el4_6.2
squid
Red Hat:enterprise_linux:5::client_workstation
 before 7:2.6.STABLE6-5.el5_1.3
7:2.6.STABLE6-5.el5_1.3
squid-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 7:2.6.STABLE6-5.el5_1.3
7:2.6.STABLE6-5.el5_1.3
squid
Red Hat:enterprise_linux:5::server
 before 7:2.6.STABLE6-5.el5_1.3
7:2.6.STABLE6-5.el5_1.3
squid-debuginfo
Red Hat:enterprise_linux:5::server
 before 7:2.6.STABLE6-5.el5_1.3
7:2.6.STABLE6-5.el5_1.3

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-1612 is a medium vulnerability (CVSS 4.3) in Squid, published April 1, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.18%, the 82nd percentile. Fixed in squid 2.6.18-1.

References

Show 22 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open