vulnerability

FreeBSD: VID-D5B6D151-1887-11E8-94F7-9C5C8E75236A (CVE-2018-1000024): squid -- Vulnerable to Denial of Service attack

Try Surface Command
Back to search
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Dec 13, 2017
Added
Feb 24, 2018
Modified
May 7, 2019

Description

The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling vulnerability in ESI Response Processing that can result in Denial of Service for all clients using the proxy.. This attack appear to be exploitable via Remote server delivers an HTTP response payload containing valid but unusual ESI syntax.. This vulnerability appears to have been fixed in 4.0.23 and later.

Solutions

freebsd-upgrade-package-squidfreebsd-upgrade-package-squid-devel

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today