Lubos Uhliarik

Name of the Vulnerable Software and Affected Versions: Squid versions prior to 4.13 Squid versions 5.x prior to 5.0.4 Description: The issue is related to a lack of input validation in the peerDigestHandleReply() function of the Squid proxy server. This can be exploited by a remote attacker to cause a denial of service. The problem occurs when the cache peer feature is used with cache digests and a trusted peer sends a crafted Cache Digest response message, causing the peerDigestHandleReply() function to mishandle EOF and consume all available CPU cycles. Recommendations: For Squid versions prior to 4.13, update to version 4.13 or later to resolve the issue. For Squid versions 5.x prior to 5.0.4, update to version 5.0.4 or later to resolve the issue. As a temporary workaround, consider disabling the cache digests feature when using cache peer to minimize the risk of exploitation.