SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade squidUpgrade libecapUpgrade libecap-devel | Nov 6, 2023 | Nov 3, 2023 |
| Alpine Linux | — | Upgrade squid | Mar 26, 2024 | Nov 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade squid-migration-scriptUpgrade squidUpgrade squid-sysvinitUpgrade squid-debuginfo | Apr 2, 2024 | Nov 3, 2023 |
| Amazon_linux | — | Upgrade squid | Apr 29, 2024 | Nov 3, 2023 |
| Amazon_linux_2023 | — | Upgrade squid-debuginfoUpgrade squidUpgrade squid-debugsource | Feb 17, 2025 | Oct 19, 2023 |
| Centos_linux | — | Upgrade squid-debugsourceUpgrade squid-debuginfoUpgrade libecapUpgrade libecap-debuginfoUpgrade libecap-debugsourceUpgrade libecap-develUpgrade squid | Nov 3, 2023 | Nov 2, 2023 |
| Debian | — | Upgrade squid | Jan 15, 2024 | Nov 3, 2023 |
| Oracle_linux | — | Upgrade squidUpgrade squid-sysvinitUpgrade libecap-develUpgrade libecapUpgrade squid-migration-script | Nov 3, 2023 | Oct 19, 2023 |
| Redhat_linux | — | Upgrade squid-debugsourceUpgrade squid-migration-scriptUpgrade squid-debuginfoUpgrade libecapNo solution existsUpgrade libecap-debugsourceUpgrade squid-sysvinitUpgrade libecap-debuginfoUpgrade libecap-develUpgrade squid | Nov 3, 2023 | Nov 2, 2023 |
| Rocky_linux | — | Upgrade libecap-debugsourceUpgrade libecap-debuginfoUpgrade squidUpgrade libecapUpgrade squid-debuginfoUpgrade squid-debugsourceUpgrade libecap-devel | Mar 5, 2024 | Nov 3, 2023 |
| Suse | — | Upgrade squid | Nov 7, 2023 | Nov 3, 2023 |
| Ubuntu | — | Upgrade squid | Nov 23, 2023 | Nov 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub