Skip to content
OpenAdvisories
High RHSA-2024:9644 2 CVEs

Red Hat Security Advisory: squid:4 security update

Published Nov 15, 2024 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream libecap 0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat · RHEL 8 enterprise_linux:8::appstream libecap-debuginfo 0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat · RHEL 8 enterprise_linux:8::appstream libecap-debugsource 0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat · RHEL 8 enterprise_linux:8::appstream libecap-devel 0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat · RHEL 8 enterprise_linux:8::appstream squid 7:4.15-10.module+el8.10.0+22489+b920747d.3
Red Hat · RHEL 8 enterprise_linux:8::appstream squid-debuginfo 7:4.15-10.module+el8.10.0+22489+b920747d.3
Red Hat · RHEL 8 enterprise_linux:8::appstream squid-debugsource 7:4.15-10.module+el8.10.0+22489+b920747d.3

Vulnerabilities 2

  • High 7.5
    CVE-2024-45802 EPSS 46%

    Squid Denial of Service

    Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Den…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2024-23638 EPSS 60%

    SQUID-2023:11 Denial of Service in Cache Manager

    Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2260051
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2322154
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9644.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-23638
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-23638
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-23638
  • article
    http://www.squid-cache.org/Versions/v5/SQUID-2023_11.patch
  • article
    http://www.squid-cache.org/Versions/v6/SQUID-2023_11.patch
  • article
    https://github.com/squid-cache/squid/commit/290ae202883ac28a48867079c2fb34c40efd382b
  • article
    https://github.com/squid-cache/squid/commit/e8118a7381213f5cfcdeb4cec1d2d854bfd261c8
  • article
    https://github.com/squid-cache/squid/security/advisories/GHSA-j49p-553x-48rx
  • article
    https://megamansec.github.io/Squid-Security-Audit/stream-assert.html
  • report
    https://access.redhat.com/security/cve/CVE-2024-45802
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-45802
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-45802
  • article
    https://github.com/squid-cache/squid/security/advisories/GHSA-f975-v7qw-q7hj