Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-37894

Опубликовано: 25 июн. 2024
Источник: debian

Описание

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
squidfixed6.10-1package

Примечания

  • https://github.com/squid-cache/squid/commit/920563e7a080155fae3ced73d6198781e8b0ff04 (master)

  • https://github.com/squid-cache/squid/commit/67f5496f7b72e698ad0f5aa3512c83089424f27f (v6)

  • https://github.com/squid-cache/squid/security/advisories/GHSA-wgvf-q977-9xjg

Связанные уязвимости

CVSS3: 6.3
ubuntu
12 месяцев назад

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.

CVSS3: 6.3
redhat
12 месяцев назад

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.

CVSS3: 6.3
nvd
12 месяцев назад

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.

suse-cvrf
12 месяцев назад

Security update for squid

suse-cvrf
12 месяцев назад

Security update for squid