Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:44232
HistoryNov 12, 2023 - 3:39 a.m.

Denial Of Service (DoS)

2023-11-1203:39:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
vulnerability
http request
resources
crash
squid instance
legitimate users
software

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.005

Percentile

76.6%

JSON

squid gitlab is vulnerable to Denial of Service (DoS). An attacker could exploit this vulnerability by sending a specially crafted HTTP request to a vulnerable Squid instance. The request would cause Squid to consume excessive resources and crash, which would prevent legitimate users from being able to access the Squid instance.

Related

redhat 8
osv 7
nessus 19
ubuntucve 2
almalinux 2
rocky 1
debiancve 1
prion 1
nvd 1
oraclelinux 2
alpinelinux 1
redhatcve 1
cve 1
openvas 5
cvelist 1
mageia 1
photon 3
redos 1
ubuntu 3
redhat
redhat
(RHSA-2023:7465) Important: squid security update
2023-11-22 16:59:46
(RHSA-2023:7668) Important: squid:4 security update
2023-12-06 09:41:55
(RHSA-2024:0072) Important: squid security update
2024-01-08 07:56:48
osv
osv
Important: squid:4 security update
2023-12-06 00:00:00
Important: squid security update
2023-11-22 00:00:00
Important: squid:4 security update
2023-12-06 23:16:33
nessus
nessus
AlmaLinux 9 : squid (ALSA-2023:7465)
2023-11-23 00:00:00
Oracle Linux 8 : squid:4 (ELSA-2023-7668)
2023-12-11 00:00:00
RHEL 9 : squid (RHSA-2023:7465)
2023-11-22 00:00:00
ubuntucve
ubuntucve
CVE-2023-5824
2023-11-03 00:00:00
CVE-2023-49288
2023-12-04 00:00:00
almalinux
almalinux
Important: squid security update
2023-11-22 00:00:00
Important: squid:4 security update
2023-12-06 00:00:00
rocky
rocky
squid:4 security update
2023-12-06 23:16:33
debiancve
debiancve
CVE-2023-5824
2023-11-03 08:15:08
prion
prion
Design/Logic Flaw
2023-11-03 08:15:00
nvd
nvd
CVE-2023-5824
2023-11-03 08:15:08
oraclelinux
oraclelinux
squid:4 security update
2023-12-11 00:00:00
squid security update
2023-11-28 00:00:00
alpinelinux
alpinelinux
CVE-2023-5824
2023-11-03 08:15:08
redhatcve
redhatcve
CVE-2023-5824
2023-10-27 09:56:59
cve
cve
CVE-2023-5824
2023-11-03 08:15:08
openvas
openvas
Squid Multiple DoS Vulnerabilities (GHSA-543m-w2m2-g255, SQUID-2023:2)
2023-10-20 00:00:00
Mageia: Security Advisory (MGASA-2024-0126)
2024-04-15 00:00:00
Ubuntu: Security Advisory (USN-6728-3)
2024-04-24 00:00:00
cvelist
cvelist
CVE-2023-5824 Squid: dos against http and https
2023-11-03 07:56:36
mageia
mageia
Updated squid packages fix security vulnerabilities
2024-04-12 23:45:19
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0751
2024-04-18 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0520
2023-11-24 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0154
2023-11-24 00:00:00
redos
redos
ROS-20231115-01
2023-11-15 00:00:00
ubuntu
ubuntu
Squid regression
2024-04-11 00:00:00
Squid vulnerability
2024-04-23 00:00:00
Squid vulnerabilities
2024-04-10 00:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.005

Percentile

76.6%

JSON
Related for VERACODE:44232
redhat8osv7nessus19ubuntucve2almalinux2rocky1debiancve1prion1nvd1oraclelinux2alpinelinux1redhatcve1cve1openvas5cvelist1mageia1photon3redos1ubuntu3