CVE-2010-0639
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7...
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.
Exploit likelihood
What each source reports
NVD Score used
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.
- Record
CVE-2010-0639- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.
- Record
CVE-2010-0639- Updated
- 2026-11-02
EUVDEUVD-2010-0670 No score
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.
- Record
EUVD-2010-0670- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cg3x-2572-rpvr No score
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7...
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.
- Record
GHSA-cg3x-2572-rpvr- Updated
- 2026-11-02
OSV No score
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.
- Record
CVE-2010-0639- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-0639 No score
The htcpHandleTstRequest function in htcp.c in Squid 2.x before 2.6.STABLE24 and 2.7 before 2.7.STABLE8, and htcp.cc in 3.0 before 3.0.STABLE24, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted packets to the HTCP port.
- Record
DEBIAN-CVE-2010-0639- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0639 is a medium vulnerability (CVSS 5.0) in Squid-cache Squid, published February 15, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 31.1%, the 98th percentile. Fixed in squid 2.7.STABLE8-1.
References
lists.fedoraproject.org/pipermail/package-announce/2010-March/037159.html
osvdb.org/62297
squid-cache.org/Advisories/SQUID-2010_2.txt
vupen.com/english/advisories/2010/0371
Show 9 moreShow less
secunia.com/advisories/38812
bugs.squid-cache.org/show_bug.cgi?id=2858
securityfocus.com/bid/38212
securitytracker.com/id?1023587
nvd.nist.gov/vuln/detail/CVE-2010-0639
github.com/advisories/GHSA-cg3x-2572-rpvr
security-tracker.debian.org/tracker/CVE-2010-0639