ID de Prueba:	1.3.6.1.4.1.25623.1.0.107297
Categoría:	Denial of Service
Título:	Squid Security Update Advisory (SQUID-2018:2)
Resumen:	Squid is vulnerable to denial of service (DoS) attack; when processing ESI responses.
Descripción:	Summary: Squid is vulnerable to denial of service (DoS) attack when processing ESI responses. Vulnerability Insight: Due to incorrect pointer handling Squid is vulnerable to denial of service attack when processing ESI responses or downloading intermediate CA certificates. Vulnerability Impact: This problem allows a remote server delivering certain ESI response syntax to trigger a denial of service for all clients accessing the Squid service. Affected Software/OS: Squid versions 3.x through 3.5.27 and 4.x through 4.0.22 with specific deployment variants described in the referenced advisory. Solution: Update to version 4.0.23 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1000027 Debian Security Information: DSA-4122 (Google Search) https://www.debian.org/security/2018/dsa-4122 https://lists.debian.org/debian-lts-announce/2018/02/msg00001.html https://lists.debian.org/debian-lts-announce/2018/02/msg00002.html https://usn.ubuntu.com/3557-1/ https://usn.ubuntu.com/4059-2/
Copyright	Copyright (C) 2018 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.