VDB
BDU%3A2023-09004
BDU%3A2023-09004
PUBLISHED
CVSS 8.600000381469727 HIGH
Уязвимость компонента Collapsed Forwarding Handler прокси-сервера Squid, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., АО «ИВК», Squid Software Foundation | Red Hat Enterprise Linux, Альт 8 СП (запись в едином реестре российских программ №4305), Squid | |
| squid-cache | squid | >= 3.5, < 6.0.1 |
Timeline
- Dec 4, 2023 CVE Published
- Jan 19, 2024 PoC Published
- Sep 12, 2024 CVE Updated
References
- https://vuldb.com/ru/?id.246851 url
- https://altsp.su/obnovleniya-bezopasnosti/ url
- https://github.com/squid-cache/squid/security/advisories/GHSA-rj5h-46j6-q2g5 url
- https://access.redhat.com/security/cve/cve-2023-49288 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEV66D3PAAY6K7TWDT3WZBLCPLASFJDC/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5QASTMCUSUEW3UOMKHZJB3FTONWSRXS/ url
- https://security.netapp.com/advisory/ntap-20240119-0006/ url