CVE-2023-49288 Denial of Service in HTTP Collapsed Forwarding in Squid

2023-12-0422:49:31

CWE-416

GitHub_M

www.cve.org

http proxy

use-after-free

collapsed forwarding

squid 3.5-5.9

denial of service

bug fix

upgrade

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

8.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.8%

JSON

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with “collapsed_forwarding on” are vulnerable. Configurations with “collapsed_forwarding off” or without a “collapsed_forwarding” directive are not vulnerable. This bug is fixed by Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should remove all collapsed_forwarding lines from their squid.conf.

CNA Affected

[
  {
    "vendor": "squid-cache",
    "product": "squid",
    "versions": [
      {
        "version": ">= 3.5, < 6.0.1",
        "status": "affected"
      }
    ]
  }
]