CVE-2024-10397

CVE-2024-10397 affects OpenAFS. According to Debian and related advisories, a malicious server can crash the OpenAFS cache manager and other client utilities and potentially execute arbitrary code. Debian- and Mageia advisories link this and related CVEs (CVE-2024-10394, CVE-2024-10396) to OpenAF...

CVE-2024-10397 Preallocated buffer overflows in XDR responses

A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code...

CVE-2024-10397 Preallocated buffer overflows in XDR responses

A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code...

CVE-2024-10397 Preallocated buffer overflows in XDR responses

A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code...

CVE-2024-10397

A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code...

squid: vulnerable to a Denial of Service attack against Cache Manager error responses

A flaw was found in Squid, resulting in a potential denial of service attack targeting Cache Manager error responses. This issue enables a trusted client to execute a denial of service by manipulating the generation of error pages for Client Manager reports...

OpenAFS buffer error vulnerability

OpenAFS is an OpenAFS open source set of distributed file systems. It allows files and resources to be shared between systems over LANs and WANs. OpenAFS suffers from a buffer error vulnerability that originates from a malicious server that could crash the cache manager and other client utilities...

PT-2024-16244

Name of the Vulnerable Software and Affected Versions OpenAFS affected versions not specified Description A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code. Recommendations At the moment, there is no information about a newer...

CVE-2024-10397: Out-of-bounds Write

A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code...

django-autoconfig (>=0.6.0, <=0.7.2), django-cache-manager (>=0.5.0, <=0.5.1) +1 more potentially affected by CVE-2024-45231 via django (1.11.0rc1)

django PYPI version 1.11.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-autoconfig =0.6.0, =0.5.0, =0.5.1 - django-inline-actions 1.1.0 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

EulerOS 2.0 SP8 : squid (EulerOS-SA-2024-2491)

According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attac...

squid: vulnerable to a Denial of Service attack against Cache Manager error responses

A flaw was found in Squid, resulting in a potential denial of service attack targeting Cache Manager error responses. This issue enables a trusted client to execute a denial of service by manipulating the generation of error pages for Client Manager reports...

RHEL 8 : squid (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - squid: lack of UID assignment in child process spawning could lead to privileges escalation CVE-2019-1252...

RHEL 9 : squid (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - squid: exposure of sensitive information in cache manager CVE-2022-41317 - Rejected reason: DO NOT USE TH...

RHEL 8 : squid (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - squid: exposure of sensitive information in cache manager CVE-2022-41317 Note that Nessus has not tested for this...

RHEL 9 : squid (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - squid: exposure of sensitive information in cache manager CVE-2022-41317 Note that Nessus has not tested for this...

Fedora 39 : squid (2024-bd8c6c6926)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-bd8c6c6926 advisory. - New squid 6.9 - security update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora 38 : squid (2024-a414a81d47)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a414a81d47 advisory. - New squid 6.9 - security update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

USN-6728-3: Squid vulnerability

USN-6728-1 fixed vulnerabilities in Squid. The fix for CVE-2023-5824 caused Squid to crash in certain environments on Ubuntu 20.04 LTS and was disabled in USN-6728-2. The problematic fix for CVE-2023-5824 has now been corrected and reinstated in this update. We apologize for the inconvenience...

USN-6728-1 squid vulnerabilities

Joshua Rogers discovered that Squid incorrectly handled collapsed forwarding. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2023-49288 Joshua Rogers discovered that Squ...