SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade squidUpgrade libecapUpgrade libecap-devel | Nov 6, 2023 | Nov 3, 2023 |
| Alpine Linux | — | Upgrade squid | Mar 26, 2024 | Nov 3, 2023 |
| Amazon Linux Ami 2 | — | Upgrade squid-migration-scriptUpgrade squidUpgrade squid-sysvinitUpgrade squid-debuginfo | Apr 2, 2024 | Nov 3, 2023 |
| Amazon_linux | — | Upgrade squid | Apr 29, 2024 | Nov 3, 2023 |
| Amazon_linux_2023 | — | Upgrade squid-debugsourceUpgrade squidUpgrade squid-debuginfo | Feb 17, 2025 | Oct 19, 2023 |
| Centos_linux | — | Upgrade squidUpgrade libecap-debugsourceUpgrade libecap-develUpgrade libecap-debuginfoUpgrade libecapUpgrade squid-debugsourceUpgrade squid-debuginfo | Nov 3, 2023 | Nov 2, 2023 |
| Debian | — | Upgrade squid | Jan 15, 2024 | Nov 3, 2023 |
| Oracle_linux | — | Upgrade libecapUpgrade squid-migration-scriptUpgrade squidUpgrade squid-sysvinitUpgrade libecap-devel | Nov 3, 2023 | Oct 19, 2023 |
| Redhat_linux | — | Upgrade libecapUpgrade squid-sysvinitUpgrade squid-migration-scriptUpgrade squid-debuginfoNo solution existsUpgrade squid-debugsourceUpgrade libecap-debugsourceUpgrade libecap-debuginfoUpgrade squidUpgrade libecap-devel | Nov 3, 2023 | Nov 2, 2023 |
| Rocky_linux | — | Upgrade libecap-develUpgrade squid-debugsourceUpgrade libecapUpgrade squid-debuginfoUpgrade libecap-debuginfoUpgrade squidUpgrade libecap-debugsource | Mar 5, 2024 | Nov 3, 2023 |
| Suse | — | Upgrade squid | Nov 7, 2023 | Nov 3, 2023 |
| Ubuntu | — | Upgrade squid | Nov 23, 2023 | Nov 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub