Lucene search
GoogleOSV:USN-6907-1HistoryJul 23, 2024 - 3:24 p.m.
squid, squid3 vulnerability
2024-07-2315:24:29
Google
osv.dev
6
squid
vulnerability
multi-byte
character
denial of service
software
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
AI Score
7
Confidence
High
Joshua Rogers discovered that Squid did not properly handle multi-byte
characters during Edge Side Includes (ESI) processing. A remote attacker
could possibly use this issue to cause a memory corruption error, leading
to a denial of service.
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2270-1)
2024-07-03 00:00:00
openSUSE: Security Advisory for squid (SUSE-SU-2024:2268-1)
2024-07-10 00:00:00
Debian: Security Advisory (DSA-5751-1)
2024-08-20 00:00:00
redos
redos
ROS-20240729-20
2024-07-29 00:00:00
alpinelinux
alpinelinux
CVE-2024-37894
2024-06-25 20:15:11
nessus
nessus
SUSE SLES12 Security Update : squid (SUSE-SU-2024:2270-1)
2024-07-03 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : squid (SUSE-SU-2024:2269-1)
2024-07-03 00:00:00
debiancve
debiancve
CVE-2024-37894
2024-06-25 20:15:11
vulnrichment
vulnrichment
CVE-2024-37894 Squid vulnerable to heap corruption in ESI assign
2024-06-25 19:39:02
mageia
mageia
Updated squid packages fix security vulnerability
2024-07-14 08:23:38
osv
osv
CVE-2024-37894
2024-06-25 20:15:00
squid - security update
2024-08-19 00:00:00
Security update for squid
2024-07-02 09:06:35
cvelist
cvelist
CVE-2024-37894 Squid vulnerable to heap corruption in ESI assign
2024-06-25 19:39:02
ubuntu
ubuntu
Squid vulnerability
2024-07-23 00:00:00
redhatcve
redhatcve
CVE-2024-37894
2024-06-26 01:21:26
ubuntucve
ubuntucve
CVE-2024-37894
2024-06-25 00:00:00
nvd
nvd
CVE-2024-37894
2024-06-25 20:15:11
amazon
amazon
Medium: squid
2024-08-01 03:01:00
cve
cve
CVE-2024-37894
2024-06-25 20:15:11
redhat
redhat
(RHSA-2024:5906) Moderate: squid security update
2024-08-27 18:11:31
(RHSA-2024:4861) Moderate: squid security update
2024-07-25 08:15:50
fedora
fedora
[SECURITY] Fedora 39 Update: squid-6.10-1.fc39
2024-07-11 01:22:26
[SECURITY] Fedora 40 Update: squid-6.10-1.fc40
2024-07-11 01:15:52
rocky
rocky
squid security update
2024-07-26 12:33:59
oraclelinux
oraclelinux
squid security update
2024-07-25 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2024-5.0-0309
2024-07-02 00:00:00
Moderate Photon OS Security Update - PHSA-2024-4.0-0645
2024-07-02 00:00:00
almalinux
almalinux
Moderate: squid security update
2024-07-25 00:00:00
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
AI Score
7
Confidence
High
Related for OSV:USN-6907-1