PT-2023-7527 · Squid+10 · Squid+11
Joshua Rogers
·
Publicado
2023-11-24
·
Atualizado
2026-03-29
·
CVE-2023-49285
CVSS v3.1
8.6
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Squid versions prior to 6.5
Description
The issue is related to a Buffer Overread bug in Squid, which can be exploited by a remote attacker to cause a Denial of Service (DoS) attack against Squid HTTP Message processing. This can be achieved by sending a specially crafted HTTP request. Squid is a caching proxy for the Web that supports HTTP, HTTPS, FTP, and more.
Recommendations
For Squid versions prior to 6.5, users are advised to upgrade to version 6.5 or later to fix the bug. There are no known workarounds for this issue. As a temporary workaround, consider restricting access to the Squid HTTP Message processing to minimize the risk of exploitation.
Exploit
Correção
DoS
Out of bounds Read
Buffer Overflow
Buffer Over-read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Red Hat
Red Os
Rocky Linux
Squid
Squid Cache
Suse
Ubuntu