Critical: squid:4 security update
Summary
ALSA-2023:6267: Critical: squid:4 security update. Affects libecap across 2 version ranges.
< 1.0.1-2.module_el8.6.0+2741+01592ae8
< 1.0.1-2.module_el8.6.0+3048+383bc947
Fixed in 1.0.1-2.module_el8.6.0+2741+01592ae8 or 1.0.1-2.module_el8.6.0+3048+383bc947, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. It is widely used to improve web server performance by caching frequently accessed content. The vulnerability affects version 4 of Squid.
Vulnerability Detail
The vulnerability, identified as SQUID-2023:3, allows for a Denial of Service attack in HTTP Digest Authentication. An attacker can exploit this vulnerability to disrupt the availability of the Squid server by sending specially crafted requests. Another vulnerability, SQUID-2023:1, enables Request/Response smuggling in HTTP/1.1 and ICAP. This vulnerability allows an attacker to manipulate the HTTP traffic between clients and the Squid server, potentially leading to unauthorized access or data leakage.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update libecap-
< 1.0.1-2.module_el8.6.0+2741+01592ae81.0.1-2.module_el8.6.0+2741+01592ae8 -
< 1.0.1-2.module_el8.6.0+3048+383bc9471.0.1-2.module_el8.6.0+3048+383bc947
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There are no mentioned workarounds for this vulnerability.
Conclusion
The Squid server is vulnerable to two critical security issues, including a Denial of Service vulnerability and Request/Response smuggling. To protect your system, it is crucial to update the affected packages to the fixed versions. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for libecap →
FAQ
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
The Denial of Service vulnerability in Squid can lead to the unavailability of the server, disrupting its normal operation.
Request/Response smuggling is a technique where an attacker manipulates the HTTP traffic between clients and servers to bypass security measures or gain unauthorized access.
To update the affected packages, you can use the package manager of your operating system or follow the instructions provided by the package maintainers.
Yes, fixed versions of the affected packages are available. It is recommended to update to these fixed versions to mitigate the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for libecap.
