CVE-2010-2951

Name	CVE-2010-2951
Description	dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via vectors that trigger an IPv4 DNS response with the TC bit set.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	599709

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
squid3 (PTS)	jessie, jessie (lts)	3.5.23-5+deb8u7	fixed
	stretch (security)	3.5.23-5+deb9u7	fixed
	stretch (lts), stretch	3.5.23-5+deb9u10	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
squid3	source	lenny	(not affected)
squid3	source	(unstable)	3.1.6-1.2			599709

[lenny] - squid3 <not-affected> (vulnerable code introduced in 3.1.6)
http://marc.info/?l=squid-users&m=128263555724981&w=2