PT-2023-7926 · Squid+8 · Squid+9

Joshua Rogers · Published 2023-11-22 · Updated 2024-08-12 · CVE-2023-49288

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Squid versions 3.5 through 5.9

Description Squid is a caching proxy for the Web that supports HTTP, HTTPS, FTP, and more. The affected versions of Squid are subject to a Use-After-Free bug, which can lead to a Denial of Service attack via collapsed forwarding. This issue arises when Squid is configured with "collapsed forwarding on". Configurations with "collapsed forwarding off" or without a "collapsed forwarding" directive are not vulnerable.

Recommendations For Squid versions 3.5 through 5.9, users are advised to upgrade to version 6.0.1 to fix the bug. For users unable to upgrade, it is recommended to remove all collapsed forwarding lines from their squid.conf as a temporary workaround.

Exploit

Fix

DoS

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

ALT-PU-2024-9370

AZL-32073

BDU:2023-09004

CESA-2023_7668

CVE-2023-49288

GHSA-RJ5H-46J6-Q2G5

MGASA-2024-0126

OPENSUSE-SU-2024:13631-1

RHSA-2023:7465

RHSA-2023:7668

RHSA-2023_7465

RHSA-2023_7668

USN-6728-1

USN-6728-2

USN-6728-3

Affected Products

Alt Linux

Centos

Debian

Linuxmint

Red Hat

Red Os

Rocky Linux

Squid

Squid Cache

Ubuntu

References · 48

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49288.json · Exploit
• https://github.com/squid-cache/squid/security/advisories/GHSA-rj5h-46j6-q2g5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-49288 · Security Note
• https://ubuntu.com/security/CVE-2024-23638 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/A5QASTMCUSUEW3UOMKHZJB3FTONWSRXS · Vendor Advisory
• https://osv.dev/vulnerability/USN-6728-3 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-49288 · Security Note
• https://ubuntu.com/security/notices/USN-6728-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6728-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-49288 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-7465.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-49288 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2023-49288 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-32073 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-49288 · Vendor Advisory