SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libecap-develUpgrade squidUpgrade libecap | Nov 6, 2023 | Nov 3, 2023 |
| Alpine Linux | — | Upgrade squid | Mar 26, 2024 | Nov 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade squid-migration-scriptUpgrade squid-sysvinitUpgrade squidUpgrade squid-debuginfo | Apr 2, 2024 | Nov 3, 2023 |
| Amazon_linux | — | Upgrade squid | Apr 29, 2024 | Nov 3, 2023 |
| Amazon_linux_2023 | — | Upgrade squid-debugsourceUpgrade squidUpgrade squid-debuginfo | Feb 17, 2025 | Oct 19, 2023 |
| Centos_linux | — | Upgrade libecap-develUpgrade libecapUpgrade libecap-debuginfoUpgrade libecap-debugsourceUpgrade squidUpgrade squid-debuginfoUpgrade squid-debugsource | Nov 3, 2023 | Nov 2, 2023 |
| Debian | — | Upgrade squid | Jan 15, 2024 | Nov 3, 2023 |
| Oracle_linux | — | Upgrade libecapUpgrade squid-migration-scriptUpgrade squid-sysvinitUpgrade squidUpgrade libecap-devel | Nov 3, 2023 | Oct 19, 2023 |
| Redhat_linux | — | Upgrade squid-debugsourceUpgrade squid-migration-scriptUpgrade squid-sysvinitUpgrade squid-debuginfoNo solution existsUpgrade libecap-debugsourceUpgrade libecap-debuginfoUpgrade libecapUpgrade libecap-develUpgrade squid | Nov 3, 2023 | Nov 2, 2023 |
| Rocky_linux | — | Upgrade libecap-develUpgrade squid-debugsourceUpgrade libecap-debugsourceUpgrade squid-debuginfoUpgrade squidUpgrade libecap-debuginfoUpgrade libecap | Mar 5, 2024 | Nov 3, 2023 |
| Suse | — | Upgrade squid | Nov 7, 2023 | Nov 3, 2023 |
| Ubuntu | — | Upgrade squid | Nov 23, 2023 | Nov 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub