SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade squidUpgrade libecap-develUpgrade libecap | Nov 6, 2023 | Nov 3, 2023 |
| Alpine Linux | — | Upgrade squid | Mar 26, 2024 | Nov 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade squid-debuginfoUpgrade squid-migration-scriptUpgrade squid-sysvinitUpgrade squid | Apr 2, 2024 | Nov 3, 2023 |
| Amazon_linux | — | Upgrade squid | Apr 29, 2024 | Nov 3, 2023 |
| Amazon_linux_2023 | — | Upgrade squid-debuginfoUpgrade squid-debugsourceUpgrade squid | Feb 17, 2025 | Oct 19, 2023 |
| Centos_linux | — | Upgrade libecapUpgrade libecap-debugsourceUpgrade libecap-develUpgrade squidUpgrade libecap-debuginfoUpgrade squid-debugsourceUpgrade squid-debuginfo | Nov 3, 2023 | Nov 2, 2023 |
| Debian | — | Upgrade squid | Jan 15, 2024 | Nov 3, 2023 |
| Oracle_linux | — | Upgrade libecapUpgrade squid-migration-scriptUpgrade libecap-develUpgrade squidUpgrade squid-sysvinit | Nov 3, 2023 | Oct 19, 2023 |
| Redhat_linux | — | Upgrade libecap-develUpgrade squidUpgrade libecap-debuginfoNo solution existsUpgrade libecap-debugsourceUpgrade squid-sysvinitUpgrade libecapUpgrade squid-debuginfoUpgrade squid-migration-scriptUpgrade squid-debugsource | Nov 3, 2023 | Nov 2, 2023 |
| Rocky_linux | — | Upgrade squid-debugsourceUpgrade libecap-develUpgrade libecap-debugsourceUpgrade libecap-debuginfoUpgrade squid-debuginfoUpgrade squidUpgrade libecap | Mar 5, 2024 | Nov 3, 2023 |
| Suse | — | Upgrade squid | Nov 7, 2023 | Nov 3, 2023 |
| Ubuntu | — | Upgrade squid | Nov 23, 2023 | Nov 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub