Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:4861

Опубликовано: 26 июл. 2024
Источник: rocky
Оценка: Moderate

Описание

Moderate: squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638)

  • squid: Out-of-bounds write error may lead to Denial of Service (CVE-2024-37894)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
squidx86_6413.el9_4squid-5.5-13.el9_4.x86_64.rpm

Показывать по

Связанные CVE

Связанные уязвимости

oracle-oval
11 месяцев назад

ELSA-2024-4861: squid security update (MODERATE)

CVSS3: 6.3
ubuntu
12 месяцев назад

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.

CVSS3: 6.3
redhat
12 месяцев назад

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.

CVSS3: 6.3
nvd
12 месяцев назад

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.

CVSS3: 6.3
debian
12 месяцев назад

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and ...