Summary
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
Security Fix(es):
* squid: DoS against HTTP and HTTPS (CVE-2023-5824)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | libecap | 0:1.0.1-2.module+el8.9.0+1437+df5ea8f0 |
| Rocky Linux · 8 | squid | 7:4.15-7.module+el8.9.0+1568+6d4fd5d4.1 |
Vulnerabilities 1
-
High 7.5
Squid: dos against http and https
A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a l…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2245914