CVE-2023-49286

2023-12-0423:15:27

Google

osv.dev

squid

proxy

dos

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.019 Low

EPSS

Percentile

88.7%

JSON

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CPENameOperatorVersion
squideq4.15-20210522-snapshot
squideq3.4.7-r0
squideqM-staged-PR164
squideqM-staged-PR376
squideq3.5.19-r1
squideqtake07
squideq4.12-r0
squideqM-staged-PR176
squideqSQUID_4_0_14
squideqtake08

Name	Operator	Version
squid	eq	4.15-20210522-snapshot
squid	eq	3.4.7-r0
squid	eq	M-staged-PR164
squid	eq	M-staged-PR376
squid	eq	3.5.19-r1
squid	eq	take07
squid	eq	4.12-r0
squid	eq	M-staged-PR176
squid	eq	SQUID_4_0_14
squid	eq	take08