Design/Logic Flaw

2023-11-0308:15:00

PRIOn knowledge base

www.prio-n.com

squid

vulnerability

http request smuggling

remote attacker

firewall

frontend security

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.4%

JSON

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

CPENameOperatorVersion
enterprise_linuxeq8.0
enterprise_linuxeq9.0
enterprise_linux_euseq8.6
enterprise_linux_euseq9.0
enterprise_linux_euseq8.8
enterprise_linux_euseq9.2
enterprise_linux_for_arm_64eq8.0.0-aarch64
enterprise_linux_for_ibm_z_systemseq8.0.0-s390-x
enterprise_linux_for_power_little_endianeq8.0.0-ppc64-le
enterprise_linux_server_auseq8.2

Name	Operator	Version
enterprise_linux	eq	8.0
enterprise_linux	eq	9.0
enterprise_linux_eus	eq	8.6
enterprise_linux_eus	eq	9.0
enterprise_linux_eus	eq	8.8
enterprise_linux_eus	eq	9.2
enterprise_linux_for_arm_64	eq	8.0.0-aarch64
enterprise_linux_for_ibm_z_systems	eq	8.0.0-s390-x
enterprise_linux_for_power_little_endian	eq	8.0.0-ppc64-le
enterprise_linux_server_aus	eq	8.2