Veracode Vulnerability DatabaseVERACODE:44587Use-After-Free
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.8%
squid is vulnerable to Use-After-Free. The vulnerability occurs due to a HTTP Collapsed Forwarding configuration allowing malicious attackers to crash the Squid process, leading to a denial-of-service (DoS).
| CPE | Name | Operator | Version |
|---|---|---|---|
| squid:sid | eq | 4.13-6 | |
| squid:sid | eq | 4.13-1 | |
| squid:sid | eq | 4.13-6 | |
| squid:sid | eq | 4.13-1 | |
| squid:edge | eq | 5.1-r0 | |
| squid:edge | eq | 5.6-r0 | |
| squid:edge | eq | 5.9-r1 | |
| squid:edge | eq | 5.5-r0 | |
| squid:edge | eq | 4.10-r0 | |
| squid:edge | eq | 4.11-r0 |
References
github.com/squid-cache/squid/security/advisories/GHSA-rj5h-46j6-q2g5
lists.fedoraproject.org/archives/list/[email protected]/message/A5QASTMCUSUEW3UOMKHZJB3FTONWSRXS/
lists.fedoraproject.org/archives/list/[email protected]/message/MEV66D3PAAY6K7TWDT3WZBLCPLASFJDC/
security-tracker.debian.org/tracker/CVE-2023-49288
security.netapp.com/advisory/ntap-20240119-0006/
Related
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.8%