Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-1000024
HistoryFeb 09, 2018 - 11:29 p.m.

CVE-2018-1000024

2018-02-0923:29:00
[email protected]
web.nvd.nist.gov
5

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.006

Percentile

78.0%

JSON

The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling vulnerability in ESI Response Processing that can result in Denial of Service for all clients using the proxy… This attack appear to be exploitable via Remote server delivers an HTTP response payload containing valid but unusual ESI syntax… This vulnerability appears to have been fixed in 4.0.23 and later.

Affected configurations

Nvd
Node
squid-cachesquidRange3.0–3.5.27
OR
squid-cachesquidRange4.0–4.0.22
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
OR
debiandebian_linuxMatch9.0
Node
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch17.10

Related

redhatcve 1
debiancve 1
cvelist 1
openvas 12
veracode 1
prion 1
ubuntucve 1
nessus 21
cve 1
osv 4
alpinelinux 1
debian 3
fedora 1
freebsd 1
amazon 1
oraclelinux 1
centos 1
redhat 1
ubuntu 3
altlinux 1
redhatcve
redhatcve
CVE-2018-1000024
2020-03-05 07:33:58
debiancve
debiancve
CVE-2018-1000024
2018-02-09 23:29:00
cvelist
cvelist
CVE-2018-1000024
2018-02-09 23:00:00
openvas
openvas
Squid Security Update Advisory (SQUID-2018:1)
2018-02-07 00:00:00
Squid Proxy Cache Security Update Advisory (SQUID-2018:1) - Linux
2018-02-07 00:00:00
Debian: Security Advisory (DLA-1266-1)
2018-02-20 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-01 00:38:29
prion
prion
Design/Logic Flaw
2018-02-09 23:29:00
ubuntucve
ubuntucve
CVE-2018-1000024
2018-01-29 00:00:00
nessus
nessus
Fedora 27 : 7:squid (2018-4fabf63492)
2018-02-07 00:00:00
openSUSE Security Update : squid (openSUSE-2018-238)
2018-03-09 00:00:00
SUSE SLES11 Security Update : squid3 (SUSE-SU-2018:0752-1)
2018-03-22 00:00:00
cve
cve
CVE-2018-1000024
2018-02-09 23:29:00
osv
osv
CVE-2018-1000024
2018-02-09 23:29:00
squid3 - security update
2018-02-02 00:00:00
squid3 - security update
2018-02-23 00:00:00
alpinelinux
alpinelinux
CVE-2018-1000024
2018-02-09 23:29:00
debian
debian
[SECURITY] [DLA 1266-1] squid3 security update
2018-02-02 14:42:06
[SECURITY] [DSA 4122-1] squid3 security update
2018-02-22 23:45:07
[SECURITY] [DSA 4122-1] squid3 security update
2018-02-22 23:45:07
fedora
fedora
[SECURITY] Fedora 27 Update: squid-4.0.23-2.fc27
2018-02-06 15:38:05
freebsd
freebsd
squid -- Vulnerable to Denial of Service attack
2017-12-13 00:00:00
amazon
amazon
Medium: squid
2018-09-19 17:10:00
oraclelinux
oraclelinux
squid security and bug fix update
2020-04-06 00:00:00
centos
centos
squid security update
2020-04-08 19:21:41
redhat
redhat
(RHSA-2020:1068) Moderate: squid security and bug fix update
2020-03-31 09:14:49
ubuntu
ubuntu
Squid vulnerabilities
2019-07-17 00:00:00
Squid vulnerabilities
2018-02-05 00:00:00
Squid regression
2022-12-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package squid version 3.5.28-alt1
2019-08-27 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.006

Percentile

78.0%

JSON
Related for NVD:CVE-2018-1000024
redhatcve1debiancve1cvelist1openvas12veracode1prion1ubuntucve1nessus21cve1osv4alpinelinux1debian3fedora1freebsd1amazon1oraclelinux1centos1redhat1ubuntu3altlinux1