Lucene search

CVE-2024-23638

🗓️ 25 Jan 2024 20:09:00Reported by redhat.comType

Flaw in Squid allows trusted client to execute denial of service attack by manipulating error pages for Cache Manager reports. Mitigation: Restrict Cache Manager access.

Reporter	Title	Published	Views	Family All 72
UbuntuCve	CVE-2024-23638	24 Jan 202400:00	–	ubuntucve
Veracode	Expired Pointer Dereference	24 Jan 202408:40	–	veracode
Debian CVE	CVE-2024-23638	24 Jan 202400:15	–	debiancve
OSV	CVE-2024-23638	24 Jan 202400:15	–	osv
OSV	Moderate: squid security update	26 Jul 202412:33	–	osv
OSV	Red Hat Security Advisory: squid security update	16 Sep 202420:34	–	osv
OSV	Red Hat Security Advisory: squid:4 security update	15 Nov 202420:47	–	osv
OSV	Important: squid:4 security update	19 Nov 202416:01	–	osv
OSV	Moderate: squid security update	25 Jul 202400:00	–	osv
OSV	Important: squid:4 security update	14 Nov 202400:00	–	osv

Vulners

Node

redhat squidRange≤4-8100020241113143337.489197e6

redhat squidRange≤5.5-13.el9_4

AND

redhat enterprise_linuxMatch8

redhat enterprise_linuxMatch9

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-23638
squid-cache	www.squid-cache.org/Versions/v5/SQUID-2023_11.patch
squid-cache	www.squid-cache.org/Versions/v6/SQUID-2023_11.patch
github	www.github.com/squid-cache/squid/commit/290ae202883ac28a48867079c2fb34c40efd382b
github	www.github.com/squid-cache/squid/commit/e8118a7381213f5cfcdeb4cec1d2d854bfd261c8
github	www.github.com/squid-cache/squid/security/advisories/GHSA-j49p-553x-48rx
megamansec	www.megamansec.github.io/Squid-Security-Audit/stream-assert.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Jan 2024 20:00Current

7.1High risk

Vulners AI Score7.1

CVSS36.5

EPSS0.011

CWE-825