CVE-2023-49285

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.

Security Fix(es):

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.(CVE-2023-49285)

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.(CVE-2023-49286)

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

• squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)

• squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)

• squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)

• squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

• squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)
• squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)
• squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)
• squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

• squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)
• squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)
• squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)
• squid: Incorrect Check of Function Return Value In Helper Process management (CVE-2023-49286)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

• CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead
• CVE-2023-49286: Fix DoS attack against Helper process management

• CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead
• CVE-2023-49286: Fix DoS attack against Helper process management

• CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead
• CVE-2023-49286: Fix DoS attack against Helper process management

• CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead
• CVE-2023-49286: Fix DoS attack against Helper process management

• CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead
• CVE-2023-49286: Fix DoS attack against Helper process management

• CVE-2023-49285: Fix date parsing in RFC 1123 to prevent Buffer OverRead
• CVE-2023-49286: Fix DoS attack against Helper process management

• SECURITY UPDATE: Buffer OverRead in RFC 1123 date/time
  • debian/patches/CVE-2023-49285.patch: Fix date parsing in RFC 1123
  • CVE-2023-49285
• SECURITY UPDATE: Denial of Service attack against Helper process management
  • debian/patches/CVE-2023-49286.patch: Add exit without asserting when helper process startup fails
  • CVE-2023-49286

• SECURITY UPDATE: Buffer OverRead in RFC 1123 date/time
  • debian/patches/CVE-2023-49285.patch: Fix date parsing in RFC 1123
  • CVE-2023-49285
• SECURITY UPDATE: Denial of Service attack against Helper process management
  • debian/patches/CVE-2023-49286.patch: Add exit without asserting when helper process startup fails
  • CVE-2023-49286

• CVE-2023-49285: Fix Buffer Overread bug to prevent Denial of Service attack
• CVE-2023-49286: Fix Incorrect Check of Function Return Value bug in Helper process management
• CVE-2023-50269: Fix Uncontrolled Recursion bug in HTTP Request parsing by limiting X-Forwarded-For header size to prevent Denial of Service attack.
• CVE-2024-25617: Fix Collapse of Data into Unsafe Value bug to prevent Denial of Service attack against HTTP header parsing

Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using --with-openssl are vulnerable to a Denial of Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a server certificate chain. This attack is limited to HTTPS and SSL-Bump. (CVE-2023-46724) Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. (CVE-2023-49285) Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. (CVE-2023-49286) Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. (CVE-2023-50269) Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when generating error pages for Client Manager reports. (CVE-2024-23638) Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunked, encoded HTTP Message. (CVE-2024-25111) Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of Service when sending oversized headers in HTTP messages. In versions of Squid prior to 6.5 this can be achieved if the request_header_max_size or reply_header_max_size settings are unchanged from the default. (CVE-2024-25617)

These are all security issues fixed in the squid-6.6-2.1 package on the GA media of openSUSE Tumbleweed.

Root has patched CVE-2023-49285 in the squid package for Root:Alpine:3.18. Multiple fixed versions available.

This update for squid fixes the following issues:

• CVE-2023-49285: Fixed buffer over read bug on HTTP Message processing flow (bsc#1217813)
• CVE-2023-49286: Fixed Denial of Service vulnerability in helper process management (bsc#1217815)
• Fix X-Forwarded-For Stack Overflow (bsc#1217654)

This update for squid fixes the following issues:

• CVE-2023-49285: Fixed buffer over read bug on HTTP Message processing flow (bsc#1217813)
• CVE-2023-49286: Fixed Denial of Service vulnerability in helper process management (bsc#1217815)
• Fix X-Forwarded-For Stack Overflow (bsc#1217654)

This update for squid fixes the following issues:

• CVE-2023-49285: Fixed buffer over read bug on HTTP Message processing flow (bsc#1217813)
• CVE-2023-49286: Fixed Denial of Service vulnerability in helper process management (bsc#1217815)
• Fix X-Forwarded-For Stack Overflow (bsc#1217654)

Joshua Rogers discovered that Squid incorrectly handled HTTP message processing. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-49285)

Joshua Rogers discovered that Squid incorrectly handled Helper process management. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-49286)

Joshua Rogers discovered that Squid incorrectly handled HTTP request parsing. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-50269)

Joshua Rogers discovered that Squid incorrectly handled requests with the urn: scheme. A remote attacker could possibly use this issue to cause Squid to consume resources, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2021-28651)

It was discovered that Squid incorrectly handled SSPI and SMB authentication. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2022-41318)

Joshua Rogers discovered that Squid incorrectly handled HTTP message processing. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-49285)

Joshua Rogers discovered that Squid incorrectly handled Helper process management. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-49286)

Joshua Rogers discovered that Squid incorrectly handled HTTP request parsing. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2023-50269, CVE-2024-25617)