CVE-2007-1560: squid

EPSS trend

Probability

28.23%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

+0.78 pp

From 27.45% on 19-09-2026

19-09-202619-10-2026

EPSS score

28.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

26 links

security.gentoo.org/glsa/glsa-200703-27.xmlVendor AdvisoryX Refsource GENTOO
www.vupen.com/english/advisories/2007/1035VDB EntryX Refsource VUPENVendor Advisory
www.squid-cache.org/Versions/v2/2.6/changesets/11349.patchX Refsource CONFIRM
secunia.com/advisories/24611Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.novell.com/linux/security/advisories/2007_5_sr.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/bid/23085VDB EntryX Refsource BID
secunia.com/advisories/24625Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.squid-cache.org/Advisories/SQUID-2007_1.txtX Refsource CONFIRMPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10291VDB EntrySignatureX Refsource OVAL
www.mandriva.com/security/advisories?name=MDKSA-2007:068Vendor AdvisoryX Refsource MANDRIVA

Show all 26 references

www.ubuntu.com/usn/usn-441-1Vendor AdvisoryX Refsource UBUNTU
www.securitytracker.com/id?1017805VDB EntryX Refsource SECTRACK
secunia.com/advisories/24662Third Party AdvisoryX Refsource SECUNIAVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/33124VDB EntryX Refsource XF
secunia.com/advisories/24911Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2007-0131.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/24614Third Party AdvisoryX Refsource SECUNIAVendor Advisory
access.redhat.com/errata/RHSA-2007:0131Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=233253REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0131.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-1560REPORT
bugzilla.redhat.com/show_bug.cgi?id=1618302REPORT
www.cve.org/CVERecord?id=CVE-2007-1560Advisory
nvd.nist.gov/vuln/detail/CVE-2007-1560Advisory
security-tracker.debian.org/tracker/CVE-2007-1560Advisory

Related vulnerabilities

CVE-2005-2794debiansquid+13.15%21y ago07-09-2005 04:00store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (crash) via certain aborted requests that trigger an assert error related to STORE_PENDING.CVE-2005-2796debiansquid+17.83%21y ago07-09-2005 04:00The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests.CVE-2005-0194debiansquid+15.12%21y ago06-02-2005 05:00Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warnings.CVE-2005-0173debiansquid+131.94%21y ago06-02-2005 05:00squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.CVE-2005-0718debiansquid+112.53%21y ago12-03-2005 05:00Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory.CVE-2005-0446debiansquid+341.11%21y ago15-02-2005 05:00Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure.

All vulnerabilities insquid

CVE-2007-1560: squid

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References