Lucene search
Gentoo FoundationMGASA-2024-0265HistoryJul 14, 2024 - 8:23 a.m.
Updated squid packages fix security vulnerability
2024-07-1408:23:38
Gentoo Foundation
advisories.mageia.org
29
squid
packages
out-of-bounds write
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
AI Score
6.8
Confidence
Low
EPSS
0
Percentile
16.0%
Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack. (CVE-2024-37894)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | squid | < 5.9-1.4 | squid-5.9-1.4.mga9 |
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2270-1)
2024-07-03 00:00:00
openSUSE: Security Advisory for squid (SUSE-SU-2024:2268-1)
2024-07-10 00:00:00
Debian: Security Advisory (DSA-5751-1)
2024-08-20 00:00:00
redos
redos
ROS-20240729-20
2024-07-29 00:00:00
alpinelinux
alpinelinux
CVE-2024-37894
2024-06-25 20:15:11
nessus
nessus
SUSE SLES12 Security Update : squid (SUSE-SU-2024:2270-1)
2024-07-03 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : squid (SUSE-SU-2024:2269-1)
2024-07-03 00:00:00
debiancve
debiancve
CVE-2024-37894
2024-06-25 20:15:11
vulnrichment
vulnrichment
CVE-2024-37894 Squid vulnerable to heap corruption in ESI assign
2024-06-25 19:39:02
osv
osv
CVE-2024-37894
2024-06-25 20:15:00
squid, squid3 vulnerability
2024-07-23 15:24:29
squid - security update
2024-08-19 00:00:00
cvelist
cvelist
CVE-2024-37894 Squid vulnerable to heap corruption in ESI assign
2024-06-25 19:39:02
ubuntucve
ubuntucve
CVE-2024-37894
2024-06-25 00:00:00
nvd
nvd
CVE-2024-37894
2024-06-25 20:15:11
amazon
amazon
Medium: squid
2024-08-01 03:01:00
cve
cve
CVE-2024-37894
2024-06-25 20:15:11
redhat
redhat
(RHSA-2024:5906) Moderate: squid security update
2024-08-27 18:11:31
(RHSA-2024:4861) Moderate: squid security update
2024-07-25 08:15:50
ubuntu
ubuntu
Squid vulnerability
2024-07-23 00:00:00
redhatcve
redhatcve
CVE-2024-37894
2024-06-26 01:21:26
fedora
fedora
[SECURITY] Fedora 39 Update: squid-6.10-1.fc39
2024-07-11 01:22:26
[SECURITY] Fedora 40 Update: squid-6.10-1.fc40
2024-07-11 01:15:52
photon
photon
Moderate Photon OS Security Update - PHSA-2024-5.0-0309
2024-07-02 00:00:00
Moderate Photon OS Security Update - PHSA-2024-4.0-0645
2024-07-02 00:00:00
almalinux
almalinux
Moderate: squid security update
2024-07-25 00:00:00
oraclelinux
oraclelinux
squid security update
2024-07-25 00:00:00
rocky
rocky
squid security update
2024-07-26 12:33:59
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
AI Score
6.8
Confidence
Low
EPSS
0
Percentile
16.0%
Related for MGASA-2024-0265