EUVD-2020-17323

Malware in sbrugna...

Squid Proxy Server Heap Buffer Overflow DoS

The vulnerability of the peerDigestHandleReply function of the Squid proxy server is related to the lack of a mechanism for verifying the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2020-24606

Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response message. This only occurs when cachepeer is used with the cache digests feature. The problem exists because...

PT-2020-5763

Name of the Vulnerable Software and Affected Versions: Squid versions prior to 4.13 Squid versions 5.x prior to 5.0.4 Description: The issue is related to a lack of input validation in the peerDigestHandleReply function of the Squid proxy server. This can be exploited by a remote attacker to caus...

CVE-2020-24606: Improper Locking

Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response message. This only occurs when cachepeer is used with the cache digests feature. The problem exists because...