![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.114207 |
Category: | Web Servers |
Title: | Squid DoS Vulnerability (GHSA-rj5h-46j6-q2g5, SQUID-2023:9) |
Summary: | Squid is prone to a denial of service (DoS) vulnerability. |
Description: | Summary: Squid is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Due to a Use-After-Free bug Squid is vulnerable to a Denial of Service attack against collapsed forwarding. This flaw was part of the 'Squid Caching Proxy Security Audit: 55 vulnerabilities and 35 0days' publication in October 2023 and filed as 'Use-After-Free in TRACE Requests'. Affected Software/OS: Squid versions 3.5 through 5.9. Solution: Update to version 6.0.1 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C |
Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2023-49288 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEV66D3PAAY6K7TWDT3WZBLCPLASFJDC/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5QASTMCUSUEW3UOMKHZJB3FTONWSRXS/ https://github.com/squid-cache/squid/security/advisories/GHSA-rj5h-46j6-q2g5 |
Copyright | Copyright (C) 2023 Greenbone AG |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |