VDB
CNVD-2024-08086
CNVD-2024-08086
PUBLISHED
CVSS 6.5 MEDIUM
Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。 Squid 6.6之前版本存在拒绝服务漏洞，该漏洞源于过期指针引用错误，攻击者可利用该漏洞导致应用程序拒绝服务。
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| squid-cache | squid | < 6.6 |
Timeline
- Jan 23, 2024 CVE Published
- Jan 24, 2024 PoC Published
- Jan 25, 2024 PoC Published
- Jan 31, 2024 PoC Published
- Feb 8, 2024 PoC Published
- Apr 13, 2024 PoC Published
References
- https://github.com/squid-cache/squid/commit/290ae202883ac28a48867079c2fb34c40efd382b url
- https://megamansec.github.io/Squid-Security-Audit/stream-assert.html url
- http://www.squid-cache.org/Versions/v5/SQUID-2023_11.patch url
- http://www.squid-cache.org/Versions/v6/SQUID-2023_11.patch url
- https://security.netapp.com/advisory/ntap-20240208-0010/ url
- https://github.com/squid-cache/squid/security/advisories/GHSA-j49p-553x-48rx url
- https://github.com/squid-cache/squid/commit/e8118a7381213f5cfcdeb4cec1d2d854bfd261c8 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7R4KPSO3MQT3KAOZV7LC2GG3CYMCGK7H/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWQHRDRHDM5PQTU6BHH4C5KGL37X6TVI/ url