Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-45802

Опубликовано: 28 окт. 2024
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*
Версия от 3.0 (включая) до 6.10 (исключая)

EPSS

Процентиль: 72%
0.0074
Низкий

7.5 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.5
ubuntu
8 месяцев назад

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

CVSS3: 7.5
redhat
8 месяцев назад

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

CVSS3: 7.5
debian
8 месяцев назад

Squid is an open source caching proxy for the Web supporting HTTP, HTT ...

oracle-oval
7 месяцев назад

ELSA-2024-9738: squid security update (IMPORTANT)

oracle-oval
7 месяцев назад

ELSA-2024-9625: squid security update (IMPORTANT)

EPSS

Процентиль: 72%
0.0074
Низкий

7.5 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo