CVE-2024-33427

2024-05-2416:15:10

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-33427

vulnerability

squid

denial of service

improper check

configparser

unquote

unix

6.5 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

Buffer Overflow vulnerability in Squid version before v.6.10 allows a local attacker cause a denial of service via a improper check of string in function ConfigParser::UnQuote.

OSVersionArchitecturePackageVersionFilename
Debian12allsquid<= 5.7-2squid_5.7-2_all.deb
Debian11allsquid<= 4.13-10+deb11u2squid_4.13-10+deb11u2_all.deb
Debian10allsquid<= 4.6-1+deb10u7squid_4.6-1+deb10u7_all.deb
Debian999allsquid<= 6.9-1squid_6.9-1_all.deb
Debian13allsquid<= 6.9-1squid_6.9-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	squid	<= 5.7-2	squid_5.7-2_all.deb
Debian	11	all	squid	<= 4.13-10+deb11u2	squid_4.13-10+deb11u2_all.deb
Debian	10	all	squid	<= 4.6-1+deb10u7	squid_4.6-1+deb10u7_all.deb
Debian	999	all	squid	<= 6.9-1	squid_6.9-1_all.deb
Debian	13	all	squid	<= 6.9-1	squid_6.9-1_all.deb