Lucene search
K

38 matches found

RedHat Linux
RedHat Linux
added 2024/03/19 2:6 p.m.40 views

Important: Red Hat Security Advisory: squid security update

An update for squid is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

8.6CVSS6.8AI score0.88864EPSS
Exploits0References4
OSV
OSV
added 2024/03/19 12:0 a.m.37 views

ALSA-2024:1375 Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: denial of service in HTTP header parser CVE-2024-25617 squid: Denial of Service in HTTP Chunked Decoding CVE-2024-25111 squid: denial of service in HTTP request...

8.6CVSS7.4AI score0.88864EPSS
Exploits0References8
AlmaLinux
AlmaLinux
added 2024/03/19 12:0 a.m.48 views

Important: squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: denial of service in HTTP header parser CVE-2024-25617 squid: Denial of Service in HTTP Chunked Decoding CVE-2024-25111 squid: denial of service in HTTP request...

8.6CVSS7.3AI score0.88864EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2024/03/06 6:14 p.m.36 views

CVE-2024-25111 SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunke...

8.6CVSS6.6AI score0.65254EPSS
Exploits0References5
Cvelist
Cvelist
added 2024/03/06 6:14 p.m.23 views

CVE-2024-25111 SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunke...

8.6CVSS8.5AI score0.65254EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2023/11/14 5:37 p.m.12 views

squid: Request/Response smuggling in HTTP/1.1 and ICAP

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

9.3CVSS5.9AI score0.05255EPSS
Exploits0References5
Veracode
Veracode
added 2023/11/12 6:41 p.m.27 views

HTTP Request Smuggling

squid is vulnerable to HTTP Request Smuggling. The vulnerability is caused by lenient handling of chunked decoding, which could enable a remote attacker to conduct Request/Response smuggling beyond firewall and frontend security systems...

9.3CVSS7.2AI score0.05255EPSS
Exploits0References17Affected Software1
RedHat Linux
RedHat Linux
added 2023/11/08 11:3 a.m.7 views

squid: Request/Response smuggling in HTTP/1.1 and ICAP

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

9.3CVSS5.9AI score0.05255EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2023/11/08 10:34 a.m.8 views

squid: Request/Response smuggling in HTTP/1.1 and ICAP

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

9.3CVSS5.9AI score0.05255EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2023/11/08 10:27 a.m.6 views

squid: Request/Response smuggling in HTTP/1.1 and ICAP

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

9.3CVSS5.9AI score0.05255EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2023/11/07 10:27 a.m.2 views

squid: Request/Response smuggling in HTTP/1.1 and ICAP

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

9.3CVSS5.9AI score0.05255EPSS
Exploits0References5
OSV
OSV
added 2023/11/03 11:6 a.m.2 views

OESA-2023-1776 squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Description: Due to chunked decoder lenience Squid is vulnerable to Request/Response...

9.3CVSS7.4AI score0.85944EPSS
Exploits0References3
OSV
OSV
added 2023/11/03 8:15 a.m.1 views

DEBIAN-CVE-2023-46846

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

5.3CVSS7.2AI score0.05255EPSS
Exploits0References1
OSV
OSV
added 2023/11/03 8:15 a.m.1 views

ALPINE-CVE-2023-46846

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

5.3CVSS7AI score0.05255EPSS
Exploits0References1
OSV
OSV
added 2023/11/03 8:15 a.m.0 views

UBUNTU-CVE-2023-46846

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

9.3CVSS6.8AI score0.05255EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2023/11/02 9:59 a.m.3 views

squid: Request/Response smuggling in HTTP/1.1 and ICAP

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

9.3CVSS5.9AI score0.05255EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2023/11/02 9:47 a.m.7 views

squid: Request/Response smuggling in HTTP/1.1 and ICAP

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

9.3CVSS5.9AI score0.05255EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2023/11/02 9:40 a.m.0 views

squid: Request/Response smuggling in HTTP/1.1 and ICAP

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems...

9.3CVSS5.9AI score0.05255EPSS
Exploits0References5
Rows per page
Query Builder