Lucene search

RedHatRHSA-2024:1375

HistoryMar 19, 2024 - 1:49 p.m.

(RHSA-2024:1375) Important: squid:4 security update

2024-03-1913:49:01

access.redhat.com

squid

proxy server

security fix

denial of service

http

cve-2024-25617

cve-2024-25111

cve-2023-50269

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

75.1%

JSON

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

squid: denial of service in HTTP header parser (CVE-2024-25617)
squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111)
squid: denial of service in HTTP request parsing (CVE-2023-50269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64squid-debugsource< 4.15-7.module+el8.9.0+21530+59b09a5b.10squid-debugsource-4.15-7.module+el8.9.0+21530+59b09a5b.10.aarch64.rpm
RedHatanyaarch64libecap< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64.rpm
RedHatanyppc64lesquid< 4.15-7.module+el8.9.0+21530+59b09a5b.10squid-4.15-7.module+el8.9.0+21530+59b09a5b.10.ppc64le.rpm
RedHatanys390xsquid< 4.15-7.module+el8.9.0+21530+59b09a5b.10squid-4.15-7.module+el8.9.0+21530+59b09a5b.10.s390x.rpm
RedHatanyaarch64libecap-devel< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-devel-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64.rpm
RedHatanyx86_64squid< 4.15-7.module+el8.9.0+21530+59b09a5b.10squid-4.15-7.module+el8.9.0+21530+59b09a5b.10.x86_64.rpm
RedHatanyppc64lelibecap< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm
RedHatanys390xsquid-debuginfo< 4.15-7.module+el8.9.0+21530+59b09a5b.10squid-debuginfo-4.15-7.module+el8.9.0+21530+59b09a5b.10.s390x.rpm
RedHatanys390xlibecap< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.s390x.rpm
RedHatanyppc64lelibecap-debugsource< 1.0.1-2.module+el8.9.0+19703+a1da7223libecap-debugsource-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	aarch64	squid-debugsource	< 4.15-7.module+el8.9.0+21530+59b09a5b.10	squid-debugsource-4.15-7.module+el8.9.0+21530+59b09a5b.10.aarch64.rpm
RedHat	any	aarch64	libecap	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64.rpm
RedHat	any	ppc64le	squid	< 4.15-7.module+el8.9.0+21530+59b09a5b.10	squid-4.15-7.module+el8.9.0+21530+59b09a5b.10.ppc64le.rpm
RedHat	any	s390x	squid	< 4.15-7.module+el8.9.0+21530+59b09a5b.10	squid-4.15-7.module+el8.9.0+21530+59b09a5b.10.s390x.rpm
RedHat	any	aarch64	libecap-devel	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-devel-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64.rpm
RedHat	any	x86_64	squid	< 4.15-7.module+el8.9.0+21530+59b09a5b.10	squid-4.15-7.module+el8.9.0+21530+59b09a5b.10.x86_64.rpm
RedHat	any	ppc64le	libecap	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm
RedHat	any	s390x	squid-debuginfo	< 4.15-7.module+el8.9.0+21530+59b09a5b.10	squid-debuginfo-4.15-7.module+el8.9.0+21530+59b09a5b.10.s390x.rpm
RedHat	any	s390x	libecap	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.s390x.rpm
RedHat	any	ppc64le	libecap-debugsource	< 1.0.1-2.module+el8.9.0+19703+a1da7223	libecap-debugsource-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le.rpm