CVE-2023-49285: Denial of Service vulnerability in Squid
Summary
CVE-2023-49285: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affects squid across 3 version ranges.
< 6.5-r0
< 77b3fb4df0f126784d5fd4967c28ed40eb8d521b
< deee944f9a12c9fd399ce52f3e2526bb573a9470
Fixed in 6.5-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Squid is a caching proxy for the Web that supports HTTP, HTTPS, FTP, and more. It is widely used to improve web server performance by caching frequently accessed content. However, a vulnerability has been discovered in Squid that can lead to a Denial of Service (DoS) attack. This vulnerability affects Squid version 6.5 and below.
Vulnerability Detail
The vulnerability in Squid is due to a Buffer Overread bug in the HTTP message processing. An attacker can exploit this bug to cause a DoS condition by sending specially crafted HTTP messages. This can result in the Squid service becoming unresponsive or crashing, leading to a disruption in web traffic. The vulnerability has been assigned a CVSS score of 7.5, indicating a high severity.
How To Fix
Minimum fixed version
6.5-r0
This is the first release that contains the fix.
sudo apk add --upgrade squidTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The vulnerability in Squid can be exploited to cause a Denial of Service (DoS) attack by sending specially crafted HTTP messages. Users are advised to upgrade to Squid version 6.5 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for squid →
FAQ
Squid is a caching proxy for the Web that improves web server performance by caching frequently accessed content.
A DoS attack is an attempt to make a computer or network resource unavailable to its intended users, typically by overwhelming the target with a flood of incoming requests or by exploiting a vulnerability to crash the system.
The Buffer Overread bug in Squid's HTTP message processing can be exploited by an attacker to send specially crafted HTTP messages that cause the service to become unresponsive or crash, resulting in a DoS condition.
The CVSS score of this vulnerability is 7.5, indicating a high severity.
To fix this vulnerability, you should upgrade to Squid version 6.5 or later, which includes a fix for the Buffer Overread bug.
Related vulnerabilities
Recent vulnerabilities recorded for squid.
