Summary
Joshua Rogers discovered that Squid incorrectly handled the Gopher
protocol. A remote attacker could possibly use this issue to cause Squid to
crash, resulting in a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | squid3 | 3.5.27-1ubuntu1.13 |
| Ubuntu · 20.04 LTS 20.04:LTS | squid | 4.10-1ubuntu1.6 |
| Ubuntu · 22.04 LTS 22.04:LTS | squid | 5.2-1ubuntu4.1 |
Vulnerabilities 1
-
Unscored —
In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Servi…
References
-
report
https://ubuntu.com/security/CVE-2021-46784