Lucene search
GoogleOSV:CVE-2024-37894HistoryJun 25, 2024 - 8:15 p.m.
CVE-2024-37894
2024-06-2520:15:00
Google
osv.dev
3
squid caching proxy
out-of-bounds write
memory corruption
denial of service
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
AI Score
7.1
Confidence
High
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2270-1)
2024-07-03 00:00:00
openSUSE: Security Advisory for squid (SUSE-SU-2024:2268-1)
2024-07-10 00:00:00
Debian: Security Advisory (DSA-5751-1)
2024-08-20 00:00:00
redos
redos
ROS-20240729-20
2024-07-29 00:00:00
alpinelinux
alpinelinux
CVE-2024-37894
2024-06-25 20:15:11
nessus
nessus
SUSE SLES12 Security Update : squid (SUSE-SU-2024:2270-1)
2024-07-03 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : squid (SUSE-SU-2024:2269-1)
2024-07-03 00:00:00
debiancve
debiancve
CVE-2024-37894
2024-06-25 20:15:11
vulnrichment
vulnrichment
CVE-2024-37894 Squid vulnerable to heap corruption in ESI assign
2024-06-25 19:39:02
mageia
mageia
Updated squid packages fix security vulnerability
2024-07-14 08:23:38
osv
osv
squid, squid3 vulnerability
2024-07-23 15:24:29
squid - security update
2024-08-19 00:00:00
Security update for squid
2024-07-02 09:06:35
cvelist
cvelist
CVE-2024-37894 Squid vulnerable to heap corruption in ESI assign
2024-06-25 19:39:02
ubuntucve
ubuntucve
CVE-2024-37894
2024-06-25 00:00:00
nvd
nvd
CVE-2024-37894
2024-06-25 20:15:11
amazon
amazon
Medium: squid
2024-08-01 03:01:00
cve
cve
CVE-2024-37894
2024-06-25 20:15:11
redhat
redhat
(RHSA-2024:5906) Moderate: squid security update
2024-08-27 18:11:31
(RHSA-2024:4861) Moderate: squid security update
2024-07-25 08:15:50
ubuntu
ubuntu
Squid vulnerability
2024-07-23 00:00:00
redhatcve
redhatcve
CVE-2024-37894
2024-06-26 01:21:26
fedora
fedora
[SECURITY] Fedora 39 Update: squid-6.10-1.fc39
2024-07-11 01:22:26
[SECURITY] Fedora 40 Update: squid-6.10-1.fc40
2024-07-11 01:15:52
photon
photon
Moderate Photon OS Security Update - PHSA-2024-5.0-0309
2024-07-02 00:00:00
Moderate Photon OS Security Update - PHSA-2024-4.0-0645
2024-07-02 00:00:00
almalinux
almalinux
Moderate: squid security update
2024-07-25 00:00:00
oraclelinux
oraclelinux
squid security update
2024-07-25 00:00:00
rocky
rocky
squid security update
2024-07-26 12:33:59
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
AI Score
7.1
Confidence
High
Related for OSV:CVE-2024-37894