Поиск уязвимостей
Количество 22
Количество 22
ALT-PU-2023-8651
ALT-PU-2023-8651: package `squid` update to version 6.1-alt1
CVE-2023-49288
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with "collapsed_forwarding on" are vulnerable. Configurations with "collapsed_forwarding off" or without a "collapsed_forwarding" directive are not vulnerable. This bug is fixed by Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should remove all collapsed_forwarding lines from their squid.conf.
CVE-2023-49288
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with "collapsed_forwarding on" are vulnerable. Configurations with "collapsed_forwarding off" or without a "collapsed_forwarding" directive are not vulnerable. This bug is fixed by Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should remove all collapsed_forwarding lines from their squid.conf.
CVE-2023-49288
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with "collapsed_forwarding on" are vulnerable. Configurations with "collapsed_forwarding off" or without a "collapsed_forwarding" directive are not vulnerable. This bug is fixed by Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should remove all collapsed_forwarding lines from their squid.conf.
CVE-2023-49288
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and ...
CVE-2023-46728
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.
CVE-2023-46728
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.
CVE-2023-46728
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests.
CVE-2023-46728
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and ...
BDU:2023-09004
Уязвимость компонента Collapsed Forwarding Handler прокси-сервера Squid, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2023:4589-1
Security update for squid
SUSE-SU-2023:4545-1
Security update for squid
SUSE-SU-2023:4544-1
Security update for squid
BDU:2024-01221
Уязвимость прокси-сервера Squid, связанная с ошибками разыменования указателей, позволяющая нарушителю вызвать отказ в обслуживании
RLSA-2023:7668
Important: squid:4 security update
ELSA-2023-7465
ELSA-2023-7465: squid security update (IMPORTANT)
RLSA-2024:0046
Important: squid:4 security update
ELSA-2024-0071
ELSA-2024-0071: squid security update (IMPORTANT)
ELSA-2024-0046
ELSA-2024-0046: squid:4 security update (IMPORTANT)
ROS-20240812-04
Множественные уязвимости squid
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2023-8651 ALT-PU-2023-8651: package `squid` update to version 6.1-alt1 | CVSS3: 7.5 | около 3 лет назад | |
 | CVE-2023-49288 Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with "collapsed_forwarding on" are vulnerable. Configurations with "collapsed_forwarding off" or without a "collapsed_forwarding" directive are not vulnerable. This bug is fixed by Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should remove all collapsed_forwarding lines from their squid.conf. | CVSS3: 7.5 | 5% Низкий | почти 3 года назад |
 | CVE-2023-49288 Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with "collapsed_forwarding on" are vulnerable. Configurations with "collapsed_forwarding off" or without a "collapsed_forwarding" directive are not vulnerable. This bug is fixed by Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should remove all collapsed_forwarding lines from their squid.conf. | CVSS3: 7.5 | 5% Низкий | почти 3 года назад |
 | CVE-2023-49288 Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with "collapsed_forwarding on" are vulnerable. Configurations with "collapsed_forwarding off" or without a "collapsed_forwarding" directive are not vulnerable. This bug is fixed by Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should remove all collapsed_forwarding lines from their squid.conf. | CVSS3: 7.5 | 5% Низкий | почти 3 года назад |
| CVE-2023-49288 Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and ... | CVSS3: 7.5 | 5% Низкий | почти 3 года назад |
| CVE-2023-46728 Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests. | CVSS3: 7.5 | 6% Низкий | около 3 лет назад |
| CVE-2023-46728 Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests. | CVSS3: 7.5 | 6% Низкий | около 3 лет назад |
| CVE-2023-46728 Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should reject all gopher URL requests. | CVSS3: 7.5 | 6% Низкий | около 3 лет назад |
| CVE-2023-46728 Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and ... | CVSS3: 7.5 | 6% Низкий | около 3 лет назад |
 | BDU:2023-09004 Уязвимость компонента Collapsed Forwarding Handler прокси-сервера Squid, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 5% Низкий | почти 3 года назад |
 | SUSE-SU-2023:4589-1 Security update for squid | 6% Низкий | почти 3 года назад | |
| SUSE-SU-2023:4545-1 Security update for squid | 6% Низкий | почти 3 года назад | |
| SUSE-SU-2023:4544-1 Security update for squid | 6% Низкий | почти 3 года назад | |
| BDU:2024-01221 Уязвимость прокси-сервера Squid, связанная с ошибками разыменования указателей, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 6% Низкий | около 3 лет назад |
 | RLSA-2023:7668 Important: squid:4 security update | почти 3 года назад | ||
| ELSA-2023-7465 ELSA-2023-7465: squid security update (IMPORTANT) | почти 3 года назад | ||
| RLSA-2024:0046 Important: squid:4 security update | почти 3 года назад | ||
| ELSA-2024-0071 ELSA-2024-0071: squid security update (IMPORTANT) | почти 3 года назад | ||
| ELSA-2024-0046 ELSA-2024-0046: squid:4 security update (IMPORTANT) | почти 3 года назад | ||
 | ROS-20240812-04 Множественные уязвимости squid | CVSS3: 8.6 | около 2 лет назад |
Уязвимостей на страницу