In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libecapUpgrade squidUpgrade libecap-devel | Jul 22, 2022 | Jul 17, 2022 |
| Amazon Linux Ami 2 | — | Upgrade squid-migration-scriptUpgrade squid-sysvinitUpgrade squidUpgrade squid-debuginfo | Jan 24, 2023 | Jul 17, 2022 |
| Amazon_linux | — | Upgrade squid | Feb 7, 2023 | Jun 22, 2022 |
| Centos_linux | — | Upgrade squidUpgrade libecap-debuginfoUpgrade libecapUpgrade squid-migration-scriptUpgrade squid-debuginfoUpgrade squid-debugsourceUpgrade libecap-develUpgrade squid-sysvinitUpgrade libecap-debugsource | Jul 11, 2022 | Jul 7, 2022 |
| Debian | — | Upgrade squid | Jun 29, 2022 | Jun 29, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade squid-migration-scriptUpgrade squid | Oct 28, 2022 | Jul 17, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade squid | Oct 11, 2022 | Jul 17, 2022 |
| Oracle_linux | — | Upgrade libecapUpgrade squid-migration-scriptUpgrade libecap-develUpgrade squid-sysvinitUpgrade squid | Jul 9, 2022 | Jun 23, 2022 |
| Redhat_linux | — | Upgrade squidUpgrade squid-debuginfoUpgrade libecap-debuginfoUpgrade libecapUpgrade libecap-develUpgrade squid-migration-scriptUpgrade libecap-debugsourceNo solution existsUpgrade squid-debugsourceUpgrade squid-sysvinit | Jul 11, 2022 | Jul 7, 2022 |
| Rocky_linux | — | Upgrade squid-debuginfoUpgrade squid-debugsourceUpgrade libecap-debugsourceUpgrade libecapUpgrade libecap-debuginfoUpgrade squidUpgrade libecap-devel | Mar 12, 2024 | Jul 17, 2022 |
| Suse | — | Upgrade squid | Oct 26, 2022 | Jul 17, 2022 |
| Ubuntu | — | Upgrade squid | Mar 22, 2023 | Jul 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub