Skip to content
OpenAdvisories
High ALSA-2024:9625 1 CVE

Important: squid security update

Published Nov 14, 2024 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

* squid: Denial of Service processing ESI response content (CVE-2024-45802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
AlmaLinux · 9 squid 7:5.5-14.el9_5.3

Vulnerabilities 1

  • High 7.5
    CVE-2024-45802 EPSS 46%

    Squid Denial of Service

    Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Den…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2024-45802
  • report
    https://bugzilla.redhat.com/2322154
  • advisory
    https://errata.almalinux.org/9/ALSA-2024-9625.html