vulnerability

Amazon Linux AMI 2: CVE-2023-49286: Security patch for squid (Multiple Advisories)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

Dec 4, 2023

Added

Jan 10, 2024

Modified

May 20, 2026

Description

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Solutions

amazon-linux-ami-2-upgrade-squidamazon-linux-ami-2-upgrade-squid-debuginfoamazon-linux-ami-2-upgrade-squid-migration-scriptamazon-linux-ami-2-upgrade-squid-sysvinit

References

AMAZON-AL2/ALAS-2024-2381
CVE-2023-49286
https://attackerkb.com/topics/CVE-2023-49286
CWE-253
CWE-617
CWE-754
EUVD-EUVD-2023-53279
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-53279

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report