Описание
A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| squid | fixed | 6.5-1 | package | |
| squid | ignored | bookworm | package | |
| squid | ignored | bullseye | package | |
| squid3 | removed | package |
Примечания
https://github.com/squid-cache/squid/security/advisories/GHSA-543m-w2m2-g255
https://megamansec.github.io/Squid-Security-Audit/cache-headers.html
Fixed by [1/4]: https://github.com/squid-cache/squid/commit/a27bf4b84da23594150c7a86a23435df0b35b988 (SQUID_6_4)
Fixed by [2/4]: https://github.com/squid-cache/squid/commit/57acdb7dcec38605ede048db82b495ba316e6311 (SQUID_6_5)
Fixed by [3/4]: https://github.com/squid-cache/squid/commit/2f3efe5d9e1c9444cb3f95fc09cbbf52985f37bf (SQUID_6_5)
Followup [4/4]: https://github.com/squid-cache/squid/commit/18209199f8c330176401eac7ef2deb06ca4389b9 (SQUID_6_6)
Fixing this CVE will fix CVE-2025-54574 as well.
EPSS
Связанные уязвимости
A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.
A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.
A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.
EPSS