Critical Denial of Service Vulnerability in Squid Caching Proxy
Summary
ALPINE-CVE-2023-49285: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affects squid versions < 6.5-r0. Fixed in 6.5-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Squid is a widely used caching proxy for the Web that supports various protocols including HTTP, HTTPS, and FTP. It is designed to improve web performance by caching frequently requested content, thus reducing bandwidth usage and improving response times. However, Squid has been found to have a vulnerability that can lead to a Denial of Service (DoS) attack, affecting its ability to process HTTP messages effectively.
Vulnerability Detail
The vulnerability identified as CVE-2023-49285 is a Buffer Overread bug in Squid that allows attackers to exploit the HTTP message processing functionality. This can lead to a Denial of Service condition, where legitimate users are unable to access the service due to the proxy being overwhelmed or crashing. The vulnerability is present in all versions of Squid prior to 6.5-r0, and it poses a significant risk to systems relying on Squid for web caching and proxy services.
How To Fix
Minimum fixed version
6.5-r0
This is the first release that contains the fix.
sudo apk add --upgrade squidTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for this vulnerability. The recommended action is to upgrade to the patched version as soon as possible.
Conclusion
The CVE-2023-49285 vulnerability in Squid poses a serious risk of Denial of Service attacks due to a Buffer Overread bug. Users are strongly advised to upgrade to version 6.5-r0 or later to mitigate this risk. Regular monitoring and timely updates are essential to maintain the security of your systems.
See every vulnerability recorded for squid →
FAQ
CVE-2023-49285 is a vulnerability in the Squid caching proxy that allows for Denial of Service attacks due to a Buffer Overread bug.
If you are running a version of Squid prior to 6.5-r0, your installation is vulnerable to this issue.
Exploitation of this vulnerability can lead to service outages, preventing legitimate users from accessing web resources through the Squid proxy.
Yes, you can use Vulert, which monitors open-source vulnerabilities in your software using just a manifest file like package-lock.json. You can check your application for this vulnerability using the Vulert playground.
The CVSS score for CVE-2023-49285 is 7.5, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for squid.
