PT-2021-4517 · Squid+9 · Squid+10

Joshua Rogers · Published 2021-05-24 · Updated 2023-10-24 · CVE-2021-31807

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Squid versions prior to 4.15 Squid versions 5.x prior to 5.0.6

Description An issue was discovered that allows a remote server to achieve Denial of Service when delivering responses to HTTP Range requests. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent. This is related to an integer overflow problem.

Recommendations For Squid versions prior to 4.15, update to version 4.15 or later. For Squid versions 5.x prior to 5.0.6, update to version 5.0.6 or later. As a temporary workaround, consider restricting access to HTTP Range requests until a patch is available.

Exploit

Fix

DoS

RCE

Integer Overflow

Weakness Enumeration

CWE-20

CWE-190

Related Identifiers

ALSA-2021:4292

ALT-PU-2021-2058

ALT-PU-2021-2829

BDU:2021-05158

BDU:2021-05301

CESA-2021_4292

CVE-2021-31807

DLA-2685-1

DSA-4924-1

GHSA-PXWQ-F3QR-W2XF

MGASA-2021-0237

RHSA-2021:4292

RHSA-2021_4292

RLSA-2021:4292

USN-4981-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Squid

Squid Cache

Ubuntu

References · 76

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/squid_range_dos.rb · Exploit
• https://osv.dev/vulnerability/USN-4981-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2021-31807 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33620 · Security Note
• https://linux.oracle.com/errata/ELSA-2021-9465.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20211008SE16 · Vendor Advisory
• http://squid-cache.org/Versions/v4/changesets/squid-4-e7cf864f938f24eea8af0692c04d16790983c823.patch · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4EPIWUZDJAXADDHVOPKRBTQHPBR6H66 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28651 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0237 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0237.html · Security Note
• https://osv.dev/vulnerability/DLA-2685-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-31807 · Security Note
• https://errata.rockylinux.org/RLSA-2021:4292 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSQ3U54ZCNXR44QRPW3AV2VCS6K3TKCF · Vendor Advisory