Every CVE Search/ Get API key

CVE-2024-45802

Squid Denial of Service

7.5 HighFix available

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

47.9%Up 47.8 points since Oct 29, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.5

Squid Denial of Service

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Record
CVE-2024-45802
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2024-41609 7.5

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Record
EUVD-2024-41609
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
NVD 7.5

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Record
CVE-2024-45802
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
OSVAZL-51819 7.5

CVE-2024-45802 affecting package squid 5.7-5

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Record
AZL-51819
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

Squid Denial of Service

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Record
CVE-2024-45802
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
OSVDEBIAN-CVE-2024-45802 7.5

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Record
DEBIAN-CVE-2024-45802
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 28 moreShow less
OSVOESA-2024-2309 7.5

squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.(CVE-2024-45802)

Record
OESA-2024-2309
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:9624 7.5

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2024:9624
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:9625 7.5

Red Hat Security Advisory: squid security update

Record
RHSA-2024:9625
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:9644 7.5

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2024:9644
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:9677 7.5

Red Hat Security Advisory: squid security update

Record
RHSA-2024:9677
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:9678 7.5

Red Hat Security Advisory: squid security update

Record
RHSA-2024:9678
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:9729 7.5

Red Hat Security Advisory: squid security update

Record
RHSA-2024:9729
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:9738 7.5

Red Hat Security Advisory: squid security update

Record
RHSA-2024:9738
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:9813 7.5

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2024:9813
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:9814 7.5

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2024:9814
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:9815 7.5

Red Hat Security Advisory: squid:4 security update

Record
RHSA-2024:9815
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-45802 7.5

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Record
UBUNTU-CVE-2024-45802
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2024:9625 No score

Important: squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: Denial of Service processing ESI response content (CVE-2024-45802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:9625
Updated
2026-11-02
OSVALSA-2024:9644 No score

Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638)
  • squid: Denial of Service processing ESI response content (CVE-2024-45802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:9644
Updated
2026-11-02
OSVCLSA-2024-1732699822 No score

Fix CVE(s): CVE-2024-45802

  • SECURITY UPDATE: Fix DoS by a trusted server by disable ESI
    • CVE-2024-45802
Record
CLSA-2024-1732699822
Updated
2026-11-02
OSVCLSA-2024-1732701268 No score

Fix CVE(s): CVE-2024-45802

  • SECURITY UPDATE: Fix DoS by a trusted server by disable ESI
    • CVE-2024-45802
Record
CLSA-2024-1732701268
Updated
2026-11-02
OSVCLSA-2024-1732701755 No score

squid: Fix of CVE-2024-45802

  • CVE-2024-45802: Disable ESI due to unfixed multiple issues in ESI causing DoS by a trusted server
Record
CLSA-2024-1732701755
Updated
2026-11-02
OSVCLSA-2024-1732702046 No score

squid: Fix of CVE-2024-45802

  • CVE-2024-45802: Fix DoS by a trusted server by disabling ESI
Record
CLSA-2024-1732702046
Updated
2026-11-02
OSVCLSA-2024-1732702216 No score

squid34: Fix of CVE-2024-45802

  • CVE-2024-45802: disable ESI
Record
CLSA-2024-1732702216
Updated
2026-11-02
OSVCLSA-2024-1732702350 No score

squid: Fix of CVE-2024-45802

  • CVE-2024-45802: disable ESI
Record
CLSA-2024-1732702350
Updated
2026-11-02
OSVCLSA-2024-1732703448 No score

squid34: Fix of CVE-2024-45802

  • CVE-2024-45802: disable ESI
Record
CLSA-2024-1732703448
Updated
2026-11-02
OSVCLSA-2024-1732704094 No score

squid: Fix of CVE-2024-45802

  • CVE-2024-45802: disable ESI
Record
CLSA-2024-1732704094
Updated
2026-11-02
OSVCLSA-2024-1733141124 No score

squid: Fix of CVE-2024-45802

  • CVE-2024-45802: Fix DoS by a trusted server by disabling ESI
Record
CLSA-2024-1733141124
Updated
2026-11-02
OSVCLSA-2025-1761575970 No score

Fix of 6 CVEs

  • SECURITY UPDATE: potential Denial of Service via TLS connection
    • debian/patches/CVE-2020-14058.patch: Fix sending of unknown validation errors to cert validator
    • CVE-2020-14058
  • SECURITY UPDATE: improper Validation of Specified Index leads to Denial of Service via TLS Handshake vulnerability
    • debian/patches/CVE-2023-46724.patch: Fix validation of certificates with CN=* due to Buffer UnderRead in SSL CN Parsing issue (#1523)
    • CVE-2023-46724
  • SECURITY UPDATE: denial of Service vulnerability in HTTP Chunked decoder due to uncontrolled recursion bug
    • debian/patches/CVE-2024-25111.patch: Fix infinite recursion when parsing HTTP chunks, prevent progress in call chain by stopping HttpStateData recursion
    • CVE-2024-25111
  • SECURITY UPDATE: denial of Service vulnerability in the NTLM authentication credentials parser due to incorrect input validation
    • debian/patches/CVE-2020-8517.patch: Fix incorrect input validation allowing writing outside of buffer and leading to denial of service
    • CVE-2020-8517
  • SECURITY UPDATE: denial of Service vulnerability against HTTP header parsing due to a Collapse of Data into Unsafe Value
    • debian/patches/CVE-2024-25617.patch: Improve handling of expanding HTTP header values to prevent DoS
    • CVE-2024-25617
  • SECURITY UPDATE: denial of Service vulnerability by a trusted server
    • debian/rules: Disable ESI due to unfixed multiple issues in ESI causing DoS by a trusted server
    • debian/control: Remove dependencies used by ESI
    • CVE-2024-45802
Record
CLSA-2025-1761575970
Updated
2026-11-02
OSVCLSA-2026-1777389615 No score

Fix CVE(s): CVE-2024-45802

  • SECURITY UPDATE: multiple vulnerabilities in Edge Side Includes (ESI) processing
    • debian/rules: build with --disable-esi to remove the vulnerable ESI response processor (matches the upstream Squid 6.10 default, where ESI support is disabled by default).
    • debian/control: drop libexpat1-dev and libxml2-dev Build-Depends as they are no longer required when ESI is disabled.
    • CVE-2024-45802
Record
CLSA-2026-1777389615
Updated
2026-11-02
OSVopenSUSE-SU-2024:14566-1 No score

squid-6.12-1.1 on GA media

These are all security issues fixed in the squid-6.12-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14566-1
Updated
2026-11-02
OSVRLSA-2024:9625 No score

Important: squid security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: Denial of Service processing ESI response content (CVE-2024-45802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:9625
Updated
2026-11-02
OSVRLSA-2024:9644 No score

Important: squid:4 security update

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638)

  • squid: Denial of Service processing ESI response content (CVE-2024-45802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:9644
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
squid
AlmaLinux:9
 before 7:5.5-14.el9_5.3
7:5.5-14.el9_5.3
libecap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.0.1-2.module_el8.6.0+2741+01592ae8
1.0.1-2.module_el8.6.0+2741+01592ae8
libecap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.0.1-2.module_el8.6.0+3048+383bc947
1.0.1-2.module_el8.6.0+3048+383bc947
libecap-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.0.1-2.module_el8.6.0+2741+01592ae8
1.0.1-2.module_el8.6.0+2741+01592ae8
libecap-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.0.1-2.module_el8.6.0+3048+383bc947
1.0.1-2.module_el8.6.0+3048+383bc947
squid
AlmaLinux:8
From an advisory covering 2 CVEs
 before 7:4.15-10.module_el8.10.0+3916+ed00a4a0.3
7:4.15-10.module_el8.10.0+3916+ed00a4a0.3
squid
Azure Linux:2
 through 5.7-5 None known
squid
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els8
3.5.27-1ubuntu1.14+tuxcare.els8
squid-cgi
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els8
3.5.27-1ubuntu1.14+tuxcare.els8
squid-common
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els8
3.5.27-1ubuntu1.14+tuxcare.els8
Show 124 moreShow less
Affected packages
PackageAffectedFixed
squid-purge
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els8
3.5.27-1ubuntu1.14+tuxcare.els8
squid3
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els8
3.5.27-1ubuntu1.14+tuxcare.els8
squidclient
TuxCare:Ubuntu:18.04
 before 3.5.27-1ubuntu1.14+tuxcare.els8
3.5.27-1ubuntu1.14+tuxcare.els8
squid
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els10
3.5.12-1ubuntu7.17+tuxcare.els10
squid-cgi
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els10
3.5.12-1ubuntu7.17+tuxcare.els10
squid-common
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els10
3.5.12-1ubuntu7.17+tuxcare.els10
squid-purge
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els10
3.5.12-1ubuntu7.17+tuxcare.els10
squid3
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els10
3.5.12-1ubuntu7.17+tuxcare.els10
squidclient
TuxCare:Ubuntu:16.04
 before 3.5.12-1ubuntu7.17+tuxcare.els10
3.5.12-1ubuntu7.17+tuxcare.els10
squid
TuxCare:CentOS:8.4
 before 7:4.11-4.module_el8.4.0+2234+c2e9b845.2.tuxcare.els13
7:4.11-4.module_el8.4.0+2234+c2e9b845.2.tuxcare.els13
squid
TuxCare:CentOS:8.5
 before 7:4.15-1.module_el8.5.0+2235+a01b9b37.tuxcare.els12
7:4.15-1.module_el8.5.0+2235+a01b9b37.tuxcare.els12
squid34
TuxCare:CentOS:6
 before 7:3.4.14-16.el6.tuxcare.els8
7:3.4.14-16.el6.tuxcare.els8
squid
TuxCare:CentOS:6
 before 7:3.1.23-30.el6.tuxcare.els13
7:3.1.23-30.el6.tuxcare.els13
squid34
TuxCare:OracleLinux:6
 before 7:3.4.14-16.el6.tuxcare.els8
7:3.4.14-16.el6.tuxcare.els8
squid
TuxCare:OracleLinux:6
 before 7:3.1.23-30.el6.tuxcare.els13
7:3.1.23-30.el6.tuxcare.els13
squid
TuxCare:CentOS-Stream:8
 before 7:4.15-10.module_el8+2236+26d7e591.tuxcare.els1
7:4.15-10.module_el8+2236+26d7e591.tuxcare.els1
squid
TuxCare:Debian:10
From an advisory covering 6 CVEs
 before 4.6-1+deb10u10+tuxcare.els1
4.6-1+deb10u10+tuxcare.els1
squid-cgi
TuxCare:Debian:10
From an advisory covering 6 CVEs
 before 4.6-1+deb10u10+tuxcare.els1
4.6-1+deb10u10+tuxcare.els1
squid-common
TuxCare:Debian:10
From an advisory covering 6 CVEs
 before 4.6-1+deb10u10+tuxcare.els1
4.6-1+deb10u10+tuxcare.els1
squid-purge
TuxCare:Debian:10
From an advisory covering 6 CVEs
 before 4.6-1+deb10u10+tuxcare.els1
4.6-1+deb10u10+tuxcare.els1
squid3
TuxCare:Debian:10
From an advisory covering 6 CVEs
 before 4.6-1+deb10u10+tuxcare.els1
4.6-1+deb10u10+tuxcare.els1
squidclient
TuxCare:Debian:10
From an advisory covering 6 CVEs
 before 4.6-1+deb10u10+tuxcare.els1
4.6-1+deb10u10+tuxcare.els1
squid
TuxCare:Ubuntu:20.04
 before 4.10-1ubuntu1.13+tuxcare.els3
4.10-1ubuntu1.13+tuxcare.els3
squid-cgi
TuxCare:Ubuntu:20.04
 before 4.10-1ubuntu1.13+tuxcare.els3
4.10-1ubuntu1.13+tuxcare.els3
squid-common
TuxCare:Ubuntu:20.04
 before 4.10-1ubuntu1.13+tuxcare.els3
4.10-1ubuntu1.13+tuxcare.els3
squid-purge
TuxCare:Ubuntu:20.04
 before 4.10-1ubuntu1.13+tuxcare.els3
4.10-1ubuntu1.13+tuxcare.els3
squidclient
TuxCare:Ubuntu:20.04
 before 4.10-1ubuntu1.13+tuxcare.els3
4.10-1ubuntu1.13+tuxcare.els3
squid
Debian:12
 before 5.7-2+deb12u5, plus listed versions
5.7-25.7-2+deb12u15.7-2+deb12u25.7-2+deb12u35.7-2+deb12u4
5.7-2+deb12u5
squid
Debian:13
 before 6.12-1
6.12-1
squid
Debian:14
 before 6.12-1
6.12-1
squid
Debian:11
From an advisory covering 3 CVEs
 before 4.13-10+deb11u4, plus listed versions
4.13-104.13-10+deb11u14.13-10+deb11u24.13-10+deb11u3
4.13-10+deb11u4
squid
openEuler:24.03-LTS
 before 6.6-4.oe2403
6.6-4.oe2403
squid
openEuler:22.03-LTS-SP4
 before 4.9-27.oe2203sp4
4.9-27.oe2203sp4
squid
openEuler:22.03-LTS-SP3
 before 4.9-27.oe2203sp3
4.9-27.oe2203sp3
squid
openEuler:20.03-LTS-SP4
 before 4.9-23.oe2003sp4
4.9-23.oe2003sp4
squid
openEuler:22.03-LTS-SP1
 before 4.9-27.oe2203sp1
4.9-27.oe2203sp1
libecap
Red Hat:rhel_aus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_aus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_aus:8.2::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_aus:8.2::appstream
 before 7:4.4-8.module+el8.2.0+22482+3b9510d6.10
7:4.4-8.module+el8.2.0+22482+3b9510d6.10
squid-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 7:4.4-8.module+el8.2.0+22482+3b9510d6.10
7:4.4-8.module+el8.2.0+22482+3b9510d6.10
squid-debugsource
Red Hat:rhel_aus:8.2::appstream
 before 7:4.4-8.module+el8.2.0+22482+3b9510d6.10
7:4.4-8.module+el8.2.0+22482+3b9510d6.10
squid
Red Hat:enterprise_linux:9::appstream
 before 7:5.5-14.el9_5.3
7:5.5-14.el9_5.3
squid-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 7:5.5-14.el9_5.3
7:5.5-14.el9_5.3
squid-debugsource
Red Hat:enterprise_linux:9::appstream
 before 7:5.5-14.el9_5.3
7:5.5-14.el9_5.3
libecap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.1-2.module+el8.9.0+19703+a1da7223
0:1.0.1-2.module+el8.9.0+19703+a1da7223
libecap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.1-2.module+el8.9.0+19703+a1da7223
0:1.0.1-2.module+el8.9.0+19703+a1da7223
libecap-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.1-2.module+el8.9.0+19703+a1da7223
0:1.0.1-2.module+el8.9.0+19703+a1da7223
libecap-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.1-2.module+el8.9.0+19703+a1da7223
0:1.0.1-2.module+el8.9.0+19703+a1da7223
squid
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 7:4.15-10.module+el8.10.0+22489+b920747d.3
7:4.15-10.module+el8.10.0+22489+b920747d.3
squid-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 7:4.15-10.module+el8.10.0+22489+b920747d.3
7:4.15-10.module+el8.10.0+22489+b920747d.3
squid-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 7:4.15-10.module+el8.10.0+22489+b920747d.3
7:4.15-10.module+el8.10.0+22489+b920747d.3
squid
Red Hat:rhel_eus:9.2::appstream
 before 7:5.5-5.el9_2.8
7:5.5-5.el9_2.8
squid-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 7:5.5-5.el9_2.8
7:5.5-5.el9_2.8
squid-debugsource
Red Hat:rhel_eus:9.2::appstream
 before 7:5.5-5.el9_2.8
7:5.5-5.el9_2.8
squid
Red Hat:rhel_eus:9.4::appstream
 before 7:5.5-13.el9_4.2
7:5.5-13.el9_4.2
squid-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 7:5.5-13.el9_4.2
7:5.5-13.el9_4.2
squid-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 7:5.5-13.el9_4.2
7:5.5-13.el9_4.2
squid
Red Hat:rhel_e4s:9.0::appstream
 before 7:5.2-1.el9_0.7
7:5.2-1.el9_0.7
squid-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 7:5.2-1.el9_0.7
7:5.2-1.el9_0.7
squid-debugsource
Red Hat:rhel_e4s:9.0::appstream
 before 7:5.2-1.el9_0.7
7:5.2-1.el9_0.7
squid
Red Hat:rhel_els:7
 before 7:3.5.20-17.el7_9.11
7:3.5.20-17.el7_9.11
squid-debuginfo
Red Hat:rhel_els:7
 before 7:3.5.20-17.el7_9.11
7:3.5.20-17.el7_9.11
squid-migration-script
Red Hat:rhel_els:7
 before 7:3.5.20-17.el7_9.11
7:3.5.20-17.el7_9.11
squid-sysvinit
Red Hat:rhel_els:7
 before 7:3.5.20-17.el7_9.11
7:3.5.20-17.el7_9.11
libecap
Red Hat:rhel_eus:8.8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_eus:8.8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_eus:8.8::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_eus:8.8::appstream
 before 7:4.15-6.module+el8.8.0+22494+5019dde6.7
7:4.15-6.module+el8.8.0+22494+5019dde6.7
squid-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 7:4.15-6.module+el8.8.0+22494+5019dde6.7
7:4.15-6.module+el8.8.0+22494+5019dde6.7
squid-debugsource
Red Hat:rhel_eus:8.8::appstream
 before 7:4.15-6.module+el8.8.0+22494+5019dde6.7
7:4.15-6.module+el8.8.0+22494+5019dde6.7
libecap
Red Hat:rhel_aus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_aus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_aus:8.6::appstream
 before 7:4.15-3.module+el8.6.0+22491+132fca59.7
7:4.15-3.module+el8.6.0+22491+132fca59.7
squid-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 7:4.15-3.module+el8.6.0+22491+132fca59.7
7:4.15-3.module+el8.6.0+22491+132fca59.7
squid-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 7:4.15-3.module+el8.6.0+22491+132fca59.7
7:4.15-3.module+el8.6.0+22491+132fca59.7
libecap
Red Hat:rhel_e4s:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_e4s:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_e4s:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_e4s:8.6::appstream
 before 7:4.15-3.module+el8.6.0+22491+132fca59.7
7:4.15-3.module+el8.6.0+22491+132fca59.7
squid-debuginfo
Red Hat:rhel_e4s:8.6::appstream
 before 7:4.15-3.module+el8.6.0+22491+132fca59.7
7:4.15-3.module+el8.6.0+22491+132fca59.7
squid-debugsource
Red Hat:rhel_e4s:8.6::appstream
 before 7:4.15-3.module+el8.6.0+22491+132fca59.7
7:4.15-3.module+el8.6.0+22491+132fca59.7
libecap
Red Hat:rhel_tus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_tus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_tus:8.6::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_tus:8.6::appstream
 before 7:4.15-3.module+el8.6.0+22491+132fca59.7
7:4.15-3.module+el8.6.0+22491+132fca59.7
squid-debuginfo
Red Hat:rhel_tus:8.6::appstream
 before 7:4.15-3.module+el8.6.0+22491+132fca59.7
7:4.15-3.module+el8.6.0+22491+132fca59.7
squid-debugsource
Red Hat:rhel_tus:8.6::appstream
 before 7:4.15-3.module+el8.6.0+22491+132fca59.7
7:4.15-3.module+el8.6.0+22491+132fca59.7
libecap
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_aus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+22483+0c92772a.9
7:4.11-4.module+el8.4.0+22483+0c92772a.9
squid-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+22483+0c92772a.9
7:4.11-4.module+el8.4.0+22483+0c92772a.9
squid-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+22483+0c92772a.9
7:4.11-4.module+el8.4.0+22483+0c92772a.9
libecap
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_e4s:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_e4s:8.4::appstream
 before 7:4.11-4.module+el8.4.0+22483+0c92772a.9
7:4.11-4.module+el8.4.0+22483+0c92772a.9
squid-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 7:4.11-4.module+el8.4.0+22483+0c92772a.9
7:4.11-4.module+el8.4.0+22483+0c92772a.9
squid-debugsource
Red Hat:rhel_e4s:8.4::appstream
 before 7:4.11-4.module+el8.4.0+22483+0c92772a.9
7:4.11-4.module+el8.4.0+22483+0c92772a.9
libecap
Red Hat:rhel_tus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debuginfo
Red Hat:rhel_tus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-debugsource
Red Hat:rhel_tus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
libecap-devel
Red Hat:rhel_tus:8.4::appstream
 before 0:1.0.1-2.module+el8.1.0+4044+36416a77
0:1.0.1-2.module+el8.1.0+4044+36416a77
squid
Red Hat:rhel_tus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+22483+0c92772a.9
7:4.11-4.module+el8.4.0+22483+0c92772a.9
squid-debuginfo
Red Hat:rhel_tus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+22483+0c92772a.9
7:4.11-4.module+el8.4.0+22483+0c92772a.9
squid-debugsource
Red Hat:rhel_tus:8.4::appstream
 before 7:4.11-4.module+el8.4.0+22483+0c92772a.9
7:4.11-4.module+el8.4.0+22483+0c92772a.9
squid
Rocky Linux:9
 before 7:5.5-14.el9_5.3
7:5.5-14.el9_5.3
libecap
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.0.1-2.module+el8.9.0+1437+df5ea8f0
0:1.0.1-2.module+el8.9.0+1437+df5ea8f0
squid
Rocky Linux:8
From an advisory covering 2 CVEs
 before 7:4.15-10.module+el8.10.0+1758+80ba9f4b
7:4.15-10.module+el8.10.0+1758+80ba9f4b
squid3
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
3.3.8-1ubuntu163.3.8-1ubuntu173.5.12-1ubuntu63.5.12-1ubuntu73.5.12-1ubuntu7.1
Show 22 moreShow less
3.5.12-1ubuntu7.23.5.12-1ubuntu7.33.5.12-1ubuntu7.43.5.12-1ubuntu7.53.5.12-1ubuntu7.63.5.12-1ubuntu7.73.5.12-1ubuntu7.83.5.12-1ubuntu7.93.5.12-1ubuntu7.103.5.12-1ubuntu7.113.5.12-1ubuntu7.123.5.12-1ubuntu7.133.5.12-1ubuntu7.143.5.12-1ubuntu7.153.5.12-1ubuntu7.163.5.12-1ubuntu7.16+esm13.5.12-1ubuntu7.16+esm23.5.12-1ubuntu7.16+esm33.5.12-1ubuntu7.16+esm43.5.12-1ubuntu7.16+esm53.5.12-1ubuntu7.16+esm63.5.12-1ubuntu7.16+esm7
 None known
squid3
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
3.5.23-5ubuntu13.5.23-5ubuntu23.5.27-1ubuntu13.5.27-1ubuntu1.13.5.27-1ubuntu1.2
Show 18 moreShow less
3.5.27-1ubuntu1.33.5.27-1ubuntu1.43.5.27-1ubuntu1.53.5.27-1ubuntu1.63.5.27-1ubuntu1.73.5.27-1ubuntu1.83.5.27-1ubuntu1.93.5.27-1ubuntu1.103.5.27-1ubuntu1.113.5.27-1ubuntu1.123.5.27-1ubuntu1.133.5.27-1ubuntu1.143.5.27-1ubuntu1.14+esm13.5.27-1ubuntu1.14+esm23.5.27-1ubuntu1.14+esm33.5.27-1ubuntu1.14+esm43.5.27-1ubuntu1.14+esm53.5.27-1ubuntu1.14+esm6
 None known
squid
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
4.8-1ubuntu24.8-1ubuntu34.9-2ubuntu14.9-2ubuntu24.9-2ubuntu3
Show 18 moreShow less
4.9-2ubuntu44.10-1ubuntu14.10-1ubuntu1.14.10-1ubuntu1.24.10-1ubuntu1.34.10-1ubuntu1.44.10-1ubuntu1.54.10-1ubuntu1.64.10-1ubuntu1.74.10-1ubuntu1.84.10-1ubuntu1.94.10-1ubuntu1.104.10-1ubuntu1.114.10-1ubuntu1.124.10-1ubuntu1.134.10-1ubuntu1.13+esm14.10-1ubuntu1.13+esm24.10-1ubuntu1.13+esm3
 None known
squid
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.13-10ubuntu55.2-1ubuntu15.2-1ubuntu35.2-1ubuntu45.2-1ubuntu4.1
Show 13 moreShow less
5.2-1ubuntu4.25.2-1ubuntu4.35.7-0ubuntu0.22.04.15.7-0ubuntu0.22.04.25.7-0ubuntu0.22.04.35.7-0ubuntu0.22.04.45.9-0ubuntu0.22.04.15.9-0ubuntu0.22.04.25.9-0ubuntu0.22.04.35.9-0ubuntu0.22.04.45.9-0ubuntu0.22.04.55.9-0ubuntu0.22.04.75.9-0ubuntu0.22.04.8
 None known
squid
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.1-2ubuntu16.1-2ubuntu26.5-1ubuntu16.5-1ubuntu26.5-1ubuntu3
Show 11 moreShow less
6.6-1ubuntu46.6-1ubuntu56.6-1ubuntu5.16.10-0ubuntu0.24.04.16.13-0ubuntu0.24.04.16.13-0ubuntu0.24.04.26.13-0ubuntu0.24.04.36.14-0ubuntu0.24.04.16.14-0ubuntu0.24.04.26.14-0ubuntu0.24.04.46.14-0ubuntu0.24.04.5
 None known
squid
openSUSE:Tumbleweed
 before 6.12-1.1
6.12-1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-45802 is a high vulnerability (CVSS 7.5) in Squid-cache Squid, published October 28, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 47.9%, the 98th percentile. Fixed in squid 7:5.5-14.el9_5.3.

References

Show 55 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open