Логотип exploitDog
bind:"BDU:2024-01221" OR bind:"CVE-2023-46728"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2024-01221" OR bind:"CVE-2023-46728"

Количество 12

Количество 12

fstec логотип

BDU:2024-01221

около 2 лет назад

Уязвимость прокси-сервера Squid, связанная с ошибками разыменования указателей, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2023-46728

около 2 лет назад

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2023-46728

больше 2 лет назад

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2023-46728

около 2 лет назад

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2023-46728

около 2 лет назад

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and ...

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:4589-1

около 2 лет назад

Security update for squid

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:4545-1

около 2 лет назад

Security update for squid

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:4544-1

около 2 лет назад

Security update for squid

EPSS: Низкий
rocky логотип

RLSA-2024:0046

около 2 лет назад

Important: squid:4 security update

EPSS: Низкий
oracle-oval логотип

ELSA-2024-0071

около 2 лет назад

ELSA-2024-0071: squid security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-0046

около 2 лет назад

ELSA-2024-0046: squid:4 security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-1787

почти 2 года назад

ELSA-2024-1787: squid security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2024-01221

Уязвимость прокси-сервера Squid, связанная с ошибками разыменования указателей, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
2%
Низкий
около 2 лет назад
ubuntu логотип
CVE-2023-46728

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.

CVSS3: 7.5
2%
Низкий
около 2 лет назад
redhat логотип
CVE-2023-46728

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.

CVSS3: 7.5
2%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-46728

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.

CVSS3: 7.5
2%
Низкий
около 2 лет назад
debian логотип
CVE-2023-46728

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and ...

CVSS3: 7.5
2%
Низкий
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:4589-1

Security update for squid

2%
Низкий
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:4545-1

Security update for squid

2%
Низкий
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:4544-1

Security update for squid

2%
Низкий
около 2 лет назад
rocky логотип
RLSA-2024:0046

Important: squid:4 security update

около 2 лет назад
oracle-oval логотип
ELSA-2024-0071

ELSA-2024-0071: squid security update (IMPORTANT)

около 2 лет назад
oracle-oval логотип
ELSA-2024-0046

ELSA-2024-0046: squid:4 security update (IMPORTANT)

около 2 лет назад
oracle-oval логотип
ELSA-2024-1787

ELSA-2024-1787: squid security update (IMPORTANT)

почти 2 года назад

Уязвимостей на страницу