Lucene search
AmazonALAS-2023-1677HistoryJan 31, 2023 - 8:44 p.m.
Important: squid
2023-01-3120:44:00
alas.aws.amazon.com
12
squid
denial of service
buffer overflow
gopher
cve-2021-46784
cve-2022-41318
red hat
mitre
unix
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS
0.02
Percentile
89.0%
Issue Overview:
In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses. (CVE-2021-46784)
A flaw was found in Squid. An incorrect integer overflow protection in the Squid SSPI and SMB authentication helpers is vulnerable to a buffer overflow attack, resulting in information disclosure or a denial of service. (CVE-2022-41318)
Affected Packages:
squid
Issue Correction:
Run yum update squid to update your system.
New Packages:
i686:
squid-3.5.20-17.43.amzn1.i686
squid-migration-script-3.5.20-17.43.amzn1.i686
squid-debuginfo-3.5.20-17.43.amzn1.i686
src:
squid-3.5.20-17.43.amzn1.src
x86_64:
squid-3.5.20-17.43.amzn1.x86_64
squid-migration-script-3.5.20-17.43.amzn1.x86_64
squid-debuginfo-3.5.20-17.43.amzn1.x86_64
Additional References
Red Hat: CVE-2021-46784, CVE-2022-41318
Mitre: CVE-2021-46784, CVE-2022-41318
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 1 | i686 | squid | < 3.5.20-17.43.amzn1 | squid-3.5.20-17.43.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | squid-migration-script | < 3.5.20-17.43.amzn1 | squid-migration-script-3.5.20-17.43.amzn1.i686.rpm |
| Amazon Linux | 1 | i686 | squid-debuginfo | < 3.5.20-17.43.amzn1 | squid-debuginfo-3.5.20-17.43.amzn1.i686.rpm |
| Amazon Linux | 1 | x86_64 | squid | < 3.5.20-17.43.amzn1 | squid-3.5.20-17.43.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | squid-migration-script | < 3.5.20-17.43.amzn1 | squid-migration-script-3.5.20-17.43.amzn1.x86_64.rpm |
| Amazon Linux | 1 | x86_64 | squid-debuginfo | < 3.5.20-17.43.amzn1 | squid-debuginfo-3.5.20-17.43.amzn1.x86_64.rpm |
Related
nessus
nessus
Amazon Linux 2 : squid (ALAS-2023-1907)
2023-01-24 00:00:00
Amazon Linux AMI : (ALAS-2023-1677)
2023-02-06 00:00:00
AlmaLinux 8 : squid:4 (5526) (ALSA-2022:5526)
2022-07-21 00:00:00
amazon
amazon
Important: squid
2023-01-18 00:16:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2273
2023-10-22 06:19:50
openvas
openvas
Ubuntu: Security Advisory (USN-5491-1)
2022-06-23 00:00:00
Fedora: Security Advisory for squid (FEDORA-2022-0fa51087e7)
2022-07-07 00:00:00
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2022-2481)
2022-10-10 00:00:00
redhat
redhat
(RHSA-2022:5527) Important: squid security update
2022-07-07 10:38:40
(RHSA-2022:5529) Important: squid:4 security update
2022-07-07 10:39:41
(RHSA-2022:6815) Important: squid security update
2022-10-05 12:08:50
osv
osv
CVE-2021-46784
2022-07-17 22:15:08
squid, squid3 vulnerability
2022-06-22 14:03:19
Important: squid security update
2022-07-07 00:00:00
mageia
mageia
Updated squid packages fix security vulnerability
2022-07-05 22:11:26
Updated squid packages fix security vulnerability
2022-10-01 20:48:24
ubuntu
ubuntu
Squid vulnerability
2022-06-22 00:00:00
Squid vulnerabilities
2022-09-26 00:00:00
Squid vulnerabilities
2024-06-27 00:00:00
cve
cve
CVE-2021-46784
2022-07-17 22:15:08
CVE-2022-41318
2022-12-25 19:15:10
suse
suse
Security update for squid (important)
2022-07-12 00:00:00
Security update for squid (important)
2022-10-17 00:00:00
Security update for squid (important)
2022-07-26 00:00:00
redos
redos
ROS-20220628-03
2022-06-28 00:00:00
ROS-20230317-02
2023-03-17 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: squid-5.6-1.fc36
2022-07-06 01:38:17
[SECURITY] Fedora 35 Update: squid-5.6-1.fc35
2022-07-06 01:54:18
[SECURITY] Fedora 36 Update: squid-5.7-1.fc36
2022-10-05 01:01:55
prion
prion
Input validation
2022-07-17 22:15:00
Integer overflow
2022-12-25 19:15:00
almalinux
almalinux
Important: squid security update
2022-07-07 00:00:00
Important: squid security update
2022-10-06 00:00:00
Important: squid:4 security update
2022-10-04 00:00:00
alpinelinux
alpinelinux
CVE-2022-41318
2022-12-25 19:15:10
redhatcve
redhatcve
CVE-2022-41318
2022-09-26 09:49:37
CVE-2021-46784
2022-06-24 06:05:32
centos
centos
squid security update
2022-10-26 14:19:36
squid security update
2022-08-02 19:14:45
cloudlinux
cloudlinux
Fixed CVE-2022-41318 in squid34
2022-10-11 15:18:31
Fixed CVE-2022-41318 in squid
2022-10-11 15:16:09
oraclelinux
oraclelinux
squid security update
2022-07-12 00:00:00
squid:4 security update
2022-07-08 00:00:00
squid:4 security update
2022-10-05 00:00:00
rocky
rocky
squid:4 security update
2022-07-07 10:38:38
squid security update
2022-10-06 14:37:45
squid:4 security update
2022-10-04 14:29:18
veracode
veracode
Denial Of Service (DoS)
2022-06-23 19:20:43
Buffer Overflow
2022-09-26 23:57:20
debiancve
debiancve
CVE-2021-46784
2022-07-17 22:15:08
CVE-2022-41318
2022-12-25 19:15:10
cvelist
cvelist
CVE-2022-41318
2022-12-25 00:00:00
CVE-2021-46784
2022-07-17 00:00:00
cnvd
cnvd
Squid out-of-bounds read vulnerability
2022-09-28 00:00:00
nvd
nvd
CVE-2022-41318
2022-12-25 19:15:10
CVE-2021-46784
2022-07-17 22:15:08
ubuntucve
ubuntucve
CVE-2022-41318
2022-09-23 00:00:00
CVE-2021-46784
2021-12-31 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0224
2022-08-06 00:00:00
Important Photon OS Security Update - PHSA-2023-0310
2023-01-09 00:00:00
Important Photon OS Security Update - PHSA-2023-0513
2023-01-10 00:00:00
debian
debian
[SECURITY] [DSA 5171-1] squid security update
2022-06-27 18:45:27
[SECURITY] [DSA 5258-1] squid security update
2022-10-19 08:18:22
[SECURITY] [DLA 3151-1] squid security update
2022-10-12 19:31:44
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS
0.02
Percentile
89.0%
Related for ALAS-2023-1677