CVE-2010-0308: lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to c...

Security readout for executives and security teams

CVE-2010-0308 is a remote denial-of-service flaw in older Squid proxy versions. A specially crafted DNS packet containing only a header can trigger an assertion failure, potentially crashing the proxy. The main business impact is loss of proxy availability, not data theft or system takeover based on the provided sources. Exposure is most likely where legacy Squid proxy deployments still run affected 2.x, 3.0, or early 3.1 versions and process DNS traffic reachable by attackers or attacker-influenced resolvers. Handle as a legacy availability risk. It is not currently evidenced as exploited, but affected Squid proxies can be remotely crashed, which may disrupt internet access, filtering, or application egress paths. Mitigation focus: Identify all Squid proxy instances and their exact versions.; Apply the relevant Squid vendor patch or upgraded vendor package.; Prioritize externally exposed or business-critical proxy services first..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.