VDB

GCVE-110-MAGEIA-2024-126

GCVE-110-MAGEIA-2024-126
Advisory Published
Vulnetix · Advisory published April 12, 2024
Affected versions of squid are subject to a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with "collapsed_forwarding on" are vulnerable. Configurations with "collapsed_forwarding off" or without a "collapsed_forwarding" directive are not vulnerable. (CVE-2023-49288) Squid is vulnerable to Denial of Service attack against HTTP and HTTPS clients due to an Improper Handling of Structural Elements bug. (CVE-2023-5824)

Affected Products

VendorProductVersionsPlatforms
Mageiadocker-compose0 (affected), 2.20.3-2.mga9 (unaffected), 0 (affected), 2.20.3-2.mga9 (unaffected)—
Mageiasquid5.9-1.3.mga9 (unaffected), 0 (affected), 0 (affected), 5.9-1.3.mga9 (unaffected), 0 (affected), 5.9-1.3.mga9 (unaffected)—

Browse GCVE Records

21,084 records in the GCVE database · Updated October 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›