Squid vulnerability

2022-06-2200:00:00

ubuntu.com

squid

ubuntu

gopher protocol

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.02

Percentile

88.9%

JSON

Releases

Ubuntu 22.04 LTS
Ubuntu 21.10
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM

Packages

squid - Web proxy cache server
squid3 - Web proxy cache server

Details

Joshua Rogers discovered that Squid incorrectly handled the Gopher
protocol. A remote attacker could possibly use this issue to cause Squid to
crash, resulting in a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchsquid< 5.2-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchsquid-cgi< 5.2-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchsquid-cgi-dbgsym< 5.2-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchsquid-common< 5.2-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchsquid-dbgsym< 5.2-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchsquid-openssl< 5.2-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchsquid-openssl-dbgsym< 5.2-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchsquid-purge< 5.2-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchsquid-purge-dbgsym< 5.2-1ubuntu4.1UNKNOWN
Ubuntu22.04noarchsquidclient< 5.2-1ubuntu4.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	22.04	noarch	squid	< 5.2-1ubuntu4.1	UNKNOWN
Ubuntu	22.04	noarch	squid-cgi	< 5.2-1ubuntu4.1	UNKNOWN
Ubuntu	22.04	noarch	squid-cgi-dbgsym	< 5.2-1ubuntu4.1	UNKNOWN
Ubuntu	22.04	noarch	squid-common	< 5.2-1ubuntu4.1	UNKNOWN
Ubuntu	22.04	noarch	squid-dbgsym	< 5.2-1ubuntu4.1	UNKNOWN
Ubuntu	22.04	noarch	squid-openssl	< 5.2-1ubuntu4.1	UNKNOWN
Ubuntu	22.04	noarch	squid-openssl-dbgsym	< 5.2-1ubuntu4.1	UNKNOWN
Ubuntu	22.04	noarch	squid-purge	< 5.2-1ubuntu4.1	UNKNOWN
Ubuntu	22.04	noarch	squid-purge-dbgsym	< 5.2-1ubuntu4.1	UNKNOWN
Ubuntu	22.04	noarch	squidclient	< 5.2-1ubuntu4.1	UNKNOWN