Описание
Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | squid | Not affected | ||
| Red Hat Enterprise Linux 7 | squid | Not affected | ||
| Red Hat Enterprise Linux 8 | squid:4/squid | Not affected | ||
| Red Hat Enterprise Linux 9 | squid | Fixed | RHSA-2023:6266 | 02.11.2023 |
| Red Hat Enterprise Linux 9 | squid | Fixed | RHSA-2023:6748 | 07.11.2023 |
| Red Hat Enterprise Linux 9.0 Extended Update Support | squid | Fixed | RHSA-2023:6268 | 02.11.2023 |
Показывать по
Дополнительная информация
Статус:
8.6 High
CVSS3
Связанные уязвимости
Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.
Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.
Squid is vulnerable to Denial of Service, where a remote attacker can ...
Уязвимость прокси-сервера Squid, связана с неправильным преобразованием между числовыми типами и неконтролируемым потреблением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
8.6 High
CVSS3