← Retour aux CVEs

CVE-2023-49286

HIGH

8.6

Description

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Details CVE

Score CVSS v3.18.6

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie12/4/2023

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

squid-cache:squid

Faiblesses (CWE)

CWE-253CWE-617CWE-617CWE-754

References

http://www.squid-cache.org/Versions/v6/SQUID-2023_8.patch(security-advisories@github.com)

https://github.com/squid-cache/squid/commit/6014c6648a2a54a4ecb7f952ea1163e0798f9264(security-advisories@github.com)

https://github.com/squid-cache/squid/security/advisories/GHSA-xggx-9329-3c27(security-advisories@github.com)

https://lists.debian.org/debian-lts-announce/2024/01/msg00003.html(security-advisories@github.com)

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5QASTMCUSUEW3UOMKHZJB3FTONWSRXS/(security-advisories@github.com)

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEV66D3PAAY6K7TWDT3WZBLCPLASFJDC/(security-advisories@github.com)

https://security.netapp.com/advisory/ntap-20240119-0004/(security-advisories@github.com)

http://www.squid-cache.org/Versions/v6/SQUID-2023_8.patch(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/squid-cache/squid/commit/6014c6648a2a54a4ecb7f952ea1163e0798f9264(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/squid-cache/squid/security/advisories/GHSA-xggx-9329-3c27(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2024/01/msg00003.html(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5QASTMCUSUEW3UOMKHZJB3FTONWSRXS/(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEV66D3PAAY6K7TWDT3WZBLCPLASFJDC/(af854a3a-2127-422b-91ae-364da2661108)

https://security.netapp.com/advisory/ntap-20240119-0004/(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.