SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libecap-develUpgrade libecapUpgrade squid | Nov 6, 2023 | Nov 3, 2023 |
| Alpine Linux | — | Upgrade squid | Mar 26, 2024 | Nov 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade squid-migration-scriptUpgrade squidUpgrade squid-sysvinitUpgrade squid-debuginfo | Apr 2, 2024 | Nov 3, 2023 |
| Amazon_linux | — | Upgrade squid | Apr 29, 2024 | Nov 3, 2023 |
| Amazon_linux_2023 | — | Upgrade squid-debugsourceUpgrade squidUpgrade squid-debuginfo | Feb 17, 2025 | Oct 19, 2023 |
| Centos_linux | — | Upgrade libecap-develUpgrade libecap-debugsourceUpgrade libecapUpgrade libecap-debuginfoUpgrade squidUpgrade squid-debuginfoUpgrade squid-debugsource | Nov 3, 2023 | Nov 2, 2023 |
| Debian | — | Upgrade squid | Jan 15, 2024 | Nov 3, 2023 |
| Oracle_linux | — | Upgrade squidUpgrade libecap-develUpgrade squid-sysvinitUpgrade libecapUpgrade squid-migration-script | Nov 3, 2023 | Oct 19, 2023 |
| Redhat_linux | — | Upgrade libecap-develUpgrade squidUpgrade libecapUpgrade squid-debugsourceUpgrade squid-debuginfoUpgrade squid-migration-scriptUpgrade libecap-debuginfoNo solution existsUpgrade squid-sysvinitUpgrade libecap-debugsource | Nov 3, 2023 | Nov 2, 2023 |
| Rocky_linux | — | Upgrade libecap-debuginfoUpgrade squid-debuginfoUpgrade squidUpgrade libecapUpgrade libecap-debugsourceUpgrade libecap-develUpgrade squid-debugsource | Mar 5, 2024 | Nov 3, 2023 |
| Suse | — | Upgrade squid | Nov 7, 2023 | Nov 3, 2023 |
| Ubuntu | — | Upgrade squid | Nov 23, 2023 | Nov 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub