In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade squidUpgrade libecap-develUpgrade libecap | Jul 22, 2022 | Jul 17, 2022 |
| Amazon Linux Ami 2 | — | Upgrade squid-sysvinitUpgrade squid-migration-scriptUpgrade squidUpgrade squid-debuginfo | Jan 24, 2023 | Jul 17, 2022 |
| Amazon_linux | — | Upgrade squid | Feb 7, 2023 | Jun 22, 2022 |
| Centos_linux | — | Upgrade libecapUpgrade squidUpgrade libecap-debuginfoUpgrade squid-debuginfoUpgrade squid-sysvinitUpgrade libecap-develUpgrade libecap-debugsourceUpgrade squid-debugsourceUpgrade squid-migration-script | Jul 11, 2022 | Jul 7, 2022 |
| Debian | — | Upgrade squid | Jun 29, 2022 | Jun 29, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade squidUpgrade squid-migration-script | Oct 28, 2022 | Jul 17, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade squid | Oct 11, 2022 | Jul 17, 2022 |
| Oracle_linux | — | Upgrade squidUpgrade squid-migration-scriptUpgrade squid-sysvinitUpgrade libecap-develUpgrade libecap | Jul 9, 2022 | Jun 23, 2022 |
| Redhat_linux | — | Upgrade squid-debugsourceUpgrade squid-sysvinitNo solution existsUpgrade squid-debuginfoUpgrade libecap-develUpgrade libecap-debuginfoUpgrade libecapUpgrade squid-migration-scriptUpgrade squidUpgrade libecap-debugsource | Jul 11, 2022 | Jul 7, 2022 |
| Rocky_linux | — | Upgrade squid-debugsourceUpgrade squid-debuginfoUpgrade squidUpgrade libecap-debugsourceUpgrade libecapUpgrade libecap-debuginfoUpgrade libecap-devel | Mar 12, 2024 | Jul 17, 2022 |
| Suse | — | Upgrade squid | Oct 26, 2022 | Jul 17, 2022 |
| Ubuntu | — | Upgrade squid | Mar 22, 2023 | Jul 17, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub