Denial of Service in Squid Proxy due to Improper Validation of Specified Index (CVE-2023-46724)
Summary
CVE-2023-46724: Squid is a caching proxy for the Web. Affects squid across 2 version ranges.
< 6.4-r0
< b70f864940225dfe69f9f653f948e787f99c3810
Fixed in 6.4-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Squid is a caching proxy for the Web that is used to improve the performance and security of web applications. It acts as an intermediary between clients and servers, caching and delivering requested content. Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4, when compiled using --with-openssl, are vulnerable to a Denial of Service attack against SSL Certificate validation.
Vulnerability Detail
The vulnerability, identified as CVE-2023-46724, arises from an Improper Validation of Specified Index bug. It allows a remote server to initiate a TLS Handshake with a specially crafted SSL Certificate in a server certificate chain, leading to a Denial of Service attack against Squid Proxy. This attack is limited to HTTPS and SSL-Bump. The vulnerability has a CVSSv3 score of 7.5, indicating a high severity level.
How To Fix
Minimum fixed version
6.4-r0
This is the first release that contains the fix.
sudo apk add --upgrade squidTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
The vulnerability in Squid Proxy, identified as CVE-2023-46724, allows for a Denial of Service attack against SSL Certificate validation. It is crucial to update Squid to version 6.4 or apply the relevant patches to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for squid →
FAQ
Squid Proxy is a caching proxy for the Web that improves performance and security by caching and delivering requested content.
Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4, when compiled using --with-openssl, are affected.
This vulnerability allows a remote server to perform a Denial of Service attack against Squid Proxy, potentially disrupting its functionality.
Yes, the vulnerability is fixed in Squid version 6.4. Patches addressing this issue for the stable releases can also be found in Squid's patch archives.
You can use Vulert's playground at Vulert Scanner to check if your Squid installation is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for squid.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
