Lucene search
Redhat.comRH:CVE-2018-1000027HistoryJan 29, 2018 - 3:20 p.m.
CVE-2018-1000027
2018-01-2915:20:19
redhat.com
access.redhat.com
32
EPSS
0.016
Percentile
87.3%
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via Remote HTTP server responding with an X-Forwarded-For header to certain types of HTTP request. This vulnerability appears to have been fixed in 4.0.23 and later.
Mitigation
A workaround for this issue is to set the "log_uses_indirect_client off" configuration directive in the squid configuration file (for example /etc/squid/squid.conf).
Related
debiancve
debiancve
CVE-2018-1000027
2018-02-09 23:29:00
nessus
nessus
Debian DLA-1267-1 : squid security update
2018-02-05 00:00:00
Debian DSA-4122-1 : squid3 - security update
2018-02-23 00:00:00
EulerOS 2.0 SP2 : squid (EulerOS-SA-2018-1075)
2018-05-02 00:00:00
openvas
openvas
Squid Security Update Advisory (SQUID-2018:2)
2018-02-09 00:00:00
Squid Proxy Cache Security Update Advisory (SQUID-2018:2) - Linux
2018-02-09 00:00:00
Debian: Security Advisory (DLA-1267-1)
2018-02-20 00:00:00
osv
osv
CVE-2018-1000027
2018-02-09 23:29:00
squid - security update
2018-02-02 00:00:00
squid3 - security update
2018-02-02 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-01 00:38:30
debian
debian
[SECURITY] [DLA 1267-1] squid security update
2018-02-02 14:43:06
[SECURITY] [DLA 1266-1] squid3 security update
2018-02-02 14:42:06
[SECURITY] [DSA 4122-1] squid3 security update
2018-02-22 23:45:07
alpinelinux
alpinelinux
CVE-2018-1000027
2018-02-09 23:29:00
nvd
nvd
CVE-2018-1000027
2018-02-09 23:29:00
ubuntucve
ubuntucve
CVE-2018-1000027
2018-01-29 00:00:00
cve
cve
CVE-2018-1000027
2018-02-09 23:29:00
cvelist
cvelist
CVE-2018-1000027
2018-02-09 23:00:00
prion
prion
Null pointer dereference
2018-02-09 23:29:00
freebsd
freebsd
squid -- Vulnerable to Denial of Service attack
2017-12-13 00:00:00
amazon
amazon
Medium: squid
2018-09-19 17:10:00
checkpoint_advisories
checkpoint_advisories
Squid Proxy Denial of Service (CVE-2018-1172; CVE-2018-1000027)
2018-05-27 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: squid-4.0.23-2.fc27
2018-02-06 15:38:05
oraclelinux
oraclelinux
squid security and bug fix update
2020-04-06 00:00:00
redhat
redhat
(RHSA-2020:1068) Moderate: squid security and bug fix update
2020-03-31 09:14:49
ubuntu
ubuntu
Squid vulnerabilities
2019-07-17 00:00:00
Squid vulnerabilities
2018-02-05 00:00:00
Squid regression
2022-12-12 00:00:00
centos
centos
squid security update
2020-04-08 19:21:41
altlinux
altlinux
Security fix for the ALT Linux 8 package squid version 3.5.28-alt1
2019-08-27 00:00:00