Important: squid security update
Summary
ALSA-2024:1376: Important: squid security update. Affects squid versions < 7:5.5-6.el9_3.8. Fixed in 7:5.5-6.el9_3.8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. It is widely used to improve web server performance by caching frequently accessed content. Squid is a critical component in many network infrastructures, providing caching and proxy services to enhance web browsing speed and reduce bandwidth consumption.
Vulnerability Detail
This security update addresses multiple vulnerabilities in Squid:
-
Denial of Service in HTTP header parser (CVE-2024-25617): An attacker can exploit this vulnerability by sending specially crafted HTTP headers, causing Squid to crash or become unresponsive.
-
Denial of Service in HTTP Chunked Decoding (CVE-2024-25111): By sending maliciously crafted HTTP requests with specially crafted chunked encoding, an attacker can cause Squid to crash or consume excessive CPU resources.
-
Denial of Service in HTTP request parsing (CVE-2023-50269): This vulnerability allows an attacker to send specially crafted HTTP requests, causing Squid to crash or become unresponsive. These vulnerabilities can be exploited remotely without authentication, making them particularly dangerous.
How To Fix
Minimum fixed version
7:5.5-6.el9_3.8
This is the first release that contains the fix.
sudo dnf update squidTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
This security update addresses multiple vulnerabilities in Squid, including denial of service issues in the HTTP header parser, HTTP Chunked Decoding, and HTTP request parsing. It is crucial to update Squid to the latest version to mitigate the risk of exploitation. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for squid →
FAQ
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. It is widely used to improve web server performance by caching frequently accessed content.
These vulnerabilities allow remote attackers to cause denial of service conditions in Squid, leading to service disruption or unresponsiveness. Exploiting these vulnerabilities does not require authentication, making them particularly dangerous.
To fix these vulnerabilities, update Squid to version 7:5.5-6.el9_3.8 or later. The updated version includes patches that address the identified security issues. Follow the vendor's instructions to install the latest update.
No specific workarounds have been provided for these vulnerabilities. It is recommended to update Squid to the latest version as soon as possible.
Yes, these vulnerabilities can be exploited remotely without authentication, making them particularly dangerous.
Related vulnerabilities
Recent vulnerabilities recorded for squid.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
