Important: squid:4 security update
Summary
ALSA-2024:1375: Important: squid:4 security update. Affects libecap across 2 version ranges.
< 1.0.1-2.module_el8.6.0+2741+01592ae8
< 1.0.1-2.module_el8.6.0+3048+383bc947
Fixed in 1.0.1-2.module_el8.6.0+2741+01592ae8 or 1.0.1-2.module_el8.6.0+3048+383bc947, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. It is widely used to improve web server performance by caching frequently accessed content. However, due to a vulnerability in the HTTP header parser, HTTP Chunked Decoding, and HTTP request parsing, Squid is susceptible to denial of service attacks.
Vulnerability Detail
The vulnerabilities in Squid include:
-
Denial of service in HTTP header parser (CVE-2024-25617): This vulnerability allows an attacker to send specially crafted HTTP headers that can cause the Squid server to crash, resulting in a denial of service.
-
Denial of Service in HTTP Chunked Decoding (CVE-2024-25111): By sending maliciously crafted HTTP requests with specially crafted chunked encoding, an attacker can cause Squid to crash, leading to a denial of service.
-
Denial of service in HTTP request parsing (CVE-2023-50269): This vulnerability allows an attacker to send specially crafted HTTP requests that can cause Squid to crash, resulting in a denial of service.
These vulnerabilities can be exploited by remote attackers to disrupt the normal functioning of Squid and potentially impact the availability of web services.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update libecap-
< 1.0.1-2.module_el8.6.0+2741+01592ae81.0.1-2.module_el8.6.0+2741+01592ae8 -
< 1.0.1-2.module_el8.6.0+3048+383bc9471.0.1-2.module_el8.6.0+3048+383bc947
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There are no known workarounds for these vulnerabilities. It is recommended to apply the security update as soon as possible.
Conclusion
It is crucial to promptly update Squid to the latest version to mitigate the risk of these vulnerabilities. Failure to do so may result in denial of service attacks and potential disruption of web services. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libecap →
FAQ
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
These vulnerabilities can be exploited by remote attackers to cause denial of service, potentially impacting the availability of web services.
To fix these vulnerabilities, update Squid to version 4.15-7.module_el8.9.0+3749+dbf371ed.10 or later.
There are no known workarounds for these vulnerabilities. It is recommended to apply the security update.
You can find more information about these vulnerabilities in the CVE pages listed in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for libecap.
