Skip to content
OpenAdvisories
High USN-6728-1 5 CVEs

squid vulnerabilities

Published Apr 10, 2024 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Joshua Rogers discovered that Squid incorrectly handled collapsed
forwarding. A remote attacker could possibly use this issue to cause Squid
to crash, resulting in a denial of service. This issue only affected Ubuntu
20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-49288)

Joshua Rogers discovered that Squid incorrectly handled certain structural
elements. A remote attacker could possibly use this issue to cause Squid to
crash, resulting in a denial of service. (CVE-2023-5824)

Joshua Rogers discovered that Squid incorrectly handled Cache Manager error
responses. A remote trusted client can possibly use this issue to cause
Squid to crash, resulting in a denial of service. (CVE-2024-23638)

Joshua Rogers discovered that Squid incorrectly handled the HTTP Chunked
decoder. A remote attacker could possibly use this issue to cause Squid to
stop responding, resulting in a denial of service. (CVE-2024-25111)

Joshua Rogers discovered that Squid incorrectly handled HTTP header
parsing. A remote trusted client can possibly use this issue to cause
Squid to crash, resulting in a denial of service. (CVE-2024-25617)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS squid 4.10-1ubuntu1.10
Ubuntu · 22.04 LTS 22.04:LTS squid 5.7-0ubuntu0.22.04.4

Vulnerabilities 5

  • High 8.6
    CVE-2023-49288

    Denial of Service in HTTP Collapsed Forwarding in Squid

    Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and includ…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine
  • High 8.6
    CVE-2024-25111 EPSS 65%

    SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

    Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of …

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2023-5824

    Squid: dos against http and https

    A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a l…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2024-23638 EPSS 60%

    SQUID-2023:11 Denial of Service in Cache Manager

    Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2024-25617 EPSS 88%

    Denial of Service in HTTP Header parser in squid proxy

    Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2023-5824
  • report
    https://ubuntu.com/security/CVE-2023-49288
  • report
    https://ubuntu.com/security/CVE-2024-23638
  • report
    https://ubuntu.com/security/CVE-2024-25111
  • report
    https://ubuntu.com/security/CVE-2024-25617