CVE-2023-49286

2023-12-0423:15:27

Google

osv.dev

squid

proxy

dos

0.019 Low

EPSS

Percentile

88.6%

JSON

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CPENameOperatorVersion
squideq3.5.17-r0
squideq3.3.5-r0
squideq3.2.0.17-r0
squideq3.5.20-r1
squideqSQUID_3_0_PRE4
squideq3.4.5-r0
squideqM-staged-PR293
squideq3.5.17-r1
squideq3.2.0.12-r4
squideq2.7.9-r4

Name	Operator	Version
squid	eq	3.5.17-r0
squid	eq	3.3.5-r0
squid	eq	3.2.0.17-r0
squid	eq	3.5.20-r1
squid	eq	SQUID_3_0_PRE4
squid	eq	3.4.5-r0
squid	eq	M-staged-PR293
squid	eq	3.5.17-r1
squid	eq	3.2.0.12-r4
squid	eq	2.7.9-r4