Test ID:	1.3.6.1.4.1.25623.1.0.148471
Category:	Denial of Service
Title:	Squid 2.0 - 4.17, 5.0.1 < 5.6 DoS Vulnerability (GHSA-f5cp-6rh3-284w, SQUID-2021:7)
Summary:	Squid is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Squid is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Due to improper buffer management Squid is vulnerable to a denial of service attack when processing Gopher server responses. This flaw was part of the 'Squid Caching Proxy Security Audit: 55 vulnerabilities and 35 0days' publication in October 2023 and filed as 'Assertion in Gopher Response Handling'. Affected Software/OS: Squid version 2.0 through 4.17 and 5.0.1 through 5.5. Solution: Update to version 5.6 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-46784 http://www.squid-cache.org/Versions/v4/changesets/SQUID-2021_7.patch http://www.squid-cache.org/Versions/v5/changesets/SQUID-2021_7.patch https://github.com/squid-cache/squid/commit/5e2ea2b13bd98f53e29964ca26bb0d602a8a12b9 https://security-tracker.debian.org/tracker/CVE-2021-46784 http://www.openwall.com/lists/oss-security/2023/10/13/1 http://www.openwall.com/lists/oss-security/2023/10/13/10 http://www.openwall.com/lists/oss-security/2023/10/21/1
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.