VDB

CNVD-2024-13541

CNVD-2024-13541 PUBLISHED CVSS 8.600000381469727 HIGH

Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。 Squid存在拒绝服务漏洞，该漏洞源于存在递归错误，攻击者可利用该漏洞导致容易受到针对HTTP Chunked解码器的拒绝服务攻击。

Risk Scores

CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected Products

VendorProductVersions
squid-cachesquid>= 3.5.27, < 6.8
squid-cachesquid3.5.27
netappbluexp0
fedoraprojectfedora38, 39

Timeline

  • Mar 4, 2024 CVE Published
  • Mar 6, 2024 PoC Published
  • Mar 7, 2024 PoC Published
  • Apr 20, 2026 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›