EUVD-2020-17323

Malware in sbrugna...

The vulnerability of the peerDigestHandleReply() function in the Squid proxy server, related to the lack of input validation mechanisms, allows attackers to trigger service denial attacks.

The vulnerability of the peerDigestHandleReply function of the Squid proxy server is related to the lack of a mechanism for verifying the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2020-24606

Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response message. This only occurs when cachepeer is used with the cache digests feature. The problem exists because...

CVE-2020-24606: Improper Locking

Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response message. This only occurs when cachepeer is used with the cache digests feature. The problem exists because...

PT-2020-5763

Name of the Vulnerable Software and Affected Versions: Squid versions prior to 4.13 Squid versions 5.x prior to 5.0.4 Description: The issue is related to a lack of input validation in the peerDigestHandleReply function of the Squid proxy server. This can be exploited by a remote attacker to caus...