Test ID:	1.3.6.1.4.1.25623.1.0.70700
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2381-1)
Summary:	The remote host is missing an update for the Debian 'squid3' package(s) announced via the DSA-2381-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'squid3' package(s) announced via the DSA-2381-1 advisory. Vulnerability Insight: It was discovered that the IPv6 support code in Squid does not properly handle certain DNS responses, resulting in deallocation of an invalid pointer and a daemon crash. The squid package and the version of Squid 3 shipped in lenny lack IPv6 support and are not affected by this issue. For the stable distribution (squeeze), this problem has been fixed in version 3.1.6-1.2+squeeze2. For the testing distribution (wheezy) and the unstable distribution (sid), this problem has been fixed in version 3.1.18-1. We recommend that you upgrade your squid3 packages. Affected Software/OS: 'squid3' package(s) on Debian 6. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4096 1026265 http://www.securitytracker.com/id?1026265 46609 http://secunia.com/advisories/46609 47459 http://secunia.com/advisories/47459 MDVSA-2011:193 http://www.mandriva.com/security/advisories?name=MDVSA-2011:193 RHSA-2011:1791 http://www.redhat.com/support/errata/RHSA-2011-1791.html SUSE-SU-2016:1996 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html SUSE-SU-2016:2089 http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html [oss-security] 20111031 CVE Request -- Squid v3.1.16 -- Invalid free by processing CNAME DNS record pointing to another CNAME record pointing to an empty A-record http://www.openwall.com/lists/oss-security/2011/10/31/5 [oss-security] 20111031 Re: CVE Request -- Squid v3.1.16 -- Invalid free by processing CNAME DNS record pointing to another CNAME record pointing to an empty A-record http://www.openwall.com/lists/oss-security/2011/11/01/3 http://bugs.squid-cache.org/show_bug.cgi?id=3237#c12 http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID_3_1_16.html
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.