Most recent entries from all

ALSA-2024:1375 — Important: squid:4 security update

Affected: AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel, AlmaLinux:8: squid

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: denial of service in HTTP header parser (CVE-2024-25617) * squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111) * squid: denial of service in HTTP request parsing (CVE-2023-50269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-08827

certfr-2023-avi-1030 — Une vulnérabilité a été découverte dans Squid. Elle permet à un attaquant de provoquer un d…

certfr-2023-avi-1030

EUVD-2026-240621

fkie_cve-2023-50269

Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.

gsd-2023-50269

OESA-2023-1947 — squid security update

Affected: openEuler:20.03-LTS-SP1: squid, openEuler:20.03-LTS-SP3: squid, openEuler:20.03-LTS-SP4: squid, openEuler:22.03-LTS: squid, openEuler:22.03-LTS-SP1: squid, openEuler:22.03-LTS-SP2: squid

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fix(es): Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.(CVE-2023-50269)

openSUSE-SU-2024:13631-1 — squid-6.6-2.1 on GA media

squid-6.6-2.1 on GA media

RHSA-2024:0397 — Red Hat Security Advisory: squid:4 security update

squid: DoS against HTTP and HTTPS squid: Denial of Service in SSL Certificate validation squid: NULL pointer dereference in the gopher protocol code squid: Buffer over-read in the HTTP Message processing feature squid: Incorrect Check of Function Return Value In Helper Process management squid: denial of service in HTTP request parsing squid-cache: Squid Buffer Overflow

SUSE-SU-2024:0296-1 — Security update for squid

Security update for squid

UBUNTU-CVE-2023-50269

Affected: Ubuntu:Pro:16.04:LTS: squid3, Ubuntu:Pro:18.04:LTS: squid3, Ubuntu:20.04:LTS: squid, Ubuntu:22.04:LTS: squid, Ubuntu:24.04:LTS: squid

WID-SEC-W-2023-3150 — Squid: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Squid ausnutzen, um einen Denial of Service Angriff durchzuführen.