A patch has been released for a Squid vulnerability that allows it to be compromised by specially crafted DNS packets.

"The problem is caused by insufficiently checked DNS responses which Squid initially places in a queue," according to The H Security. "By sending packets that only contain a header, a queue overflow can be triggered which can apparently be exploited for Denial-of-Service (DoS) attacks."

"The flaw can be exploited both from internal clients and from external DNS servers," the article states.

Click here to read the article at The H Security.