Test ID:	1.3.6.1.4.1.25623.1.0.100664
Category:	Web Servers
Title:	Squid Multiple DoS Vulnerabilities (GHSA-2g3c-pg7q-g59w, SQUID-2023:5)
Summary:	Squid is prone to multiple denial of service (DoS); vulnerabilities.
Description:	Summary: Squid is prone to multiple denial of service (DoS) vulnerabilities. Vulnerability Insight: The following flaws exist: - Due to an Incorrect Conversion between Numeric Types bug Squid is vulnerable to a Denial of Service attack against FTP Native Relay input validation. - Due to an Incorrect Conversion between Numeric Types bug Squid is vulnerable to a Denial of Service attack against ftp:// URL validation and access control. These flaws were part of the 'Squid Caching Proxy Security Audit: 55 vulnerabilities and 35 0days' publication in October 2023 and filed as 'FTP URI Assertion'. Affected Software/OS: Squid versions 5.0.3 through 5.9 and 6.0 through 6.3. Solution: Update to version 6.4 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-46848 RHBZ#2245919 https://bugzilla.redhat.com/show_bug.cgi?id=2245919 RHSA-2023:6266 https://access.redhat.com/errata/RHSA-2023:6266 RHSA-2023:6268 https://access.redhat.com/errata/RHSA-2023:6268 RHSA-2023:6748 https://access.redhat.com/errata/RHSA-2023:6748 https://access.redhat.com/security/cve/CVE-2023-46848 https://github.com/squid-cache/squid/security/advisories/GHSA-2g3c-pg7q-g59w https://security.netapp.com/advisory/ntap-20231214-0005/
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.