Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libecap-develUpgrade libecapUpgrade squid | Nov 6, 2023 | Nov 3, 2023 |
| Alpine Linux | — | Upgrade squid | Mar 26, 2024 | Nov 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade squidUpgrade squid-sysvinitUpgrade squid-migration-scriptUpgrade squid-debuginfo | Nov 8, 2023 | Nov 3, 2023 |
| Amazon_linux | — | Upgrade squid | Nov 8, 2023 | Oct 28, 2023 |
| Amazon_linux_2023 | — | Upgrade squid-debuginfoUpgrade squid-debugsourceUpgrade squid | Feb 17, 2025 | Oct 19, 2023 |
| Centos_linux | — | Upgrade squid-debuginfoUpgrade squid-sysvinitUpgrade squidUpgrade squid-migration-script | Nov 3, 2023 | Nov 2, 2023 |
| Debian | — | Upgrade squid | Jan 15, 2024 | Nov 3, 2023 |
| Oracle_linux | — | Upgrade squid-sysvinitUpgrade squidUpgrade libecap-develUpgrade libecapUpgrade squid-migration-script | Nov 3, 2023 | Oct 19, 2023 |
| Redhat_linux | — | Upgrade libecap-debugsourceUpgrade squidUpgrade libecap-develUpgrade squid-sysvinitUpgrade squid-migration-scriptUpgrade libecapUpgrade squid-debugsourceUpgrade squid-debuginfoUpgrade libecap-debuginfo | Nov 3, 2023 | Nov 2, 2023 |
| Rocky_linux | — | Upgrade squid-debugsourceUpgrade libecap-develUpgrade libecapUpgrade squidUpgrade squid-debuginfoUpgrade libecap-debugsourceUpgrade libecap-debuginfo | Mar 5, 2024 | Nov 3, 2023 |
| Suse | — | Upgrade squid | Nov 7, 2023 | Nov 3, 2023 |
| Ubuntu | — | Upgrade squid3 (Ubuntu Pro)Upgrade squidUpgrade squid (Ubuntu Pro) | Nov 23, 2023 | Nov 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub