CVE-2024-33427
Security update for squid
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
What each source reports
CVE List No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
- Record
CVE-2024-33427- Updated
- 2026-11-02
EUVDEUVD-2024-31166 No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
- Record
EUVD-2024-31166- Updated
- 2026-11-03
NVD No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
- Record
CVE-2024-33427- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14008-1 No score
squid-6.9-1.1 on GA media
These are all security issues fixed in the squid-6.9-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14008-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:1896-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2024-33427: Fixed possible buffer overread that could have led to a denial-of-service (bsc#1225417).
- Record
SUSE-SU-2024:1896-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:1911-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2024-33427: Fixed possible buffer overread that could have led to a denial-of-service (bsc#1225417).
- Record
SUSE-SU-2024:1911-1- Updated
- 2026-11-02
OSVSUSE-SU-2024:1961-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2024-33427: Fixed possible buffer overread that could have led to a denial-of-service (bsc#1225417).
- Record
SUSE-SU-2024:1961-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:03521-1 No score
Security update for squid
This update for squid fixes the following issues:
- CVE-2025-59362: fixed buffer overflow (bsc#1250627)
- CVE-2024-37894: fixed denial of service in ESI processing (bsc#1227086)
- CVE-2024-33427: fixed possible buffer overread leading to denial of service (bsc#1225417)
- Record
SUSE-SU-2025:03521-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
squidSUSE:Linux Enterprise Module for Server Applications 15 SP5 |
before 5.7-150400.3.29.2 | 5.7-150400.3.29.2 |
squidopenSUSE:Leap 15.5 |
before 5.7-150400.3.29.2 | 5.7-150400.3.29.2 |
squidSUSE:Linux Enterprise Server 12 SP5 |
before 4.17-4.47.1 | 4.17-4.47.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 4.17-4.47.1 | 4.17-4.47.1 |
squidSUSE:Linux Enterprise Module for Server Applications 15 SP6 |
before 6.9-150600.3.3.2 | 6.9-150600.3.3.2 |
squidopenSUSE:Leap 15.6 |
before 6.9-150600.3.3.2 | 6.9-150600.3.3.2 |
squidSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 3 CVEs |
before 4.17-150000.5.55.1 | 4.17-150000.5.55.1 |
squidSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 3 CVEs |
before 4.17-150000.5.55.1 | 4.17-150000.5.55.1 |
squidSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 3 CVEs |
before 4.17-150000.5.55.1 | 4.17-150000.5.55.1 |
squidSUSE:Enterprise Storage 7.1 From an advisory covering 3 CVEs |
before 4.17-150000.5.55.1 | 4.17-150000.5.55.1 |
squidopenSUSE:Tumbleweed |
before 6.9-1.1 | 6.9-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-33427 has been rejected by its source and should not be treated as a live vulnerability, published May 24, 2024. Fixed in squid 5.7-150400.3.29.2.
References
suse.com/support/update/announcement/2024/suse-su-20241896-1
bugzilla.suse.com/1225417