squid security update

2024-07-2500:00:00

linux.oracle.com

squid

security update

out-of-bounds write

dos

vulnerabilities

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

Low

JSON

[7:5.5-13]

Resolves: RHEL-45056 - squid: Out-of-bounds write error may lead to Denial of
Service (CVE-2024-37894)
Resolves: RHEL-45643 - squid: vulnerable to a Denial of Service attack against
Cache Manager error responses (CVE-2024-23638)

OSVersionArchitecturePackageVersionFilename
oracle linux9srcsquid< 5.5-13.el9_4squid-5.5-13.el9_4.src.rpm
oracle linux9aarch64squid< 5.5-13.el9_4squid-5.5-13.el9_4.aarch64.rpm
oracle linux9srcsquid< 5.5-13.el9_4squid-5.5-13.el9_4.src.rpm
oracle linux9x86_64squid< 5.5-13.el9_4squid-5.5-13.el9_4.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	squid	< 5.5-13.el9_4	squid-5.5-13.el9_4.src.rpm
oracle linux	9	aarch64	squid	< 5.5-13.el9_4	squid-5.5-13.el9_4.aarch64.rpm
oracle linux	9	src	squid	< 5.5-13.el9_4	squid-5.5-13.el9_4.src.rpm
oracle linux	9	x86_64	squid	< 5.5-13.el9_4	squid-5.5-13.el9_4.x86_64.rpm