Description (CNA)
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| squid-cache / squid | affected >= 3.0, <= 3.5.28; affected >= 4.0, <= 4.16; affected >= 5.0, <= 5.9; affected >= 6.0, <= 6.9 |
CWE
CWE-787
References
- https://github.com/squid-cache/squid/security/advisories/GHSA-wgvf-q977-9xjg
- https://github.com/squid-cache/squid/commit/f411fe7d75197852f0e5ee85027a06d58dd8df4c.patch
- https://security.netapp.com/advisory/ntap-20240719-0001/
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.