{"id":"CVE-2023-50269","aliases":["ALPINE-CVE-2023-50269","ALSA-2024:1375","ALSA-2024:1376","AZL-32251","CLSA-2024-1706026202","CLSA-2024-1706026402","CLSA-2024-1706026564","CLSA-2024-1706026686","CLSA-2024-1706026919","CLSA-2024-1706027577","CLSA-2024-1706027727","CLSA-2024-1706697415","CLSA-2025-1736503631","DEBIAN-CVE-2023-50269","DLA-3709-1","DSA-5637-1","EUVD-2023-55081","GHSA-wgq4-4cfg-c4x3","MGASA-2024-0102","OESA-2023-1947","RHSA-2024:0397","RHSA-2024:0771","RHSA-2024:0772","RHSA-2024:0773","RHSA-2024:1085","RHSA-2024:1153","RHSA-2024:1375","RHSA-2024:1376","RHSA-2024:1787","RLSA-2024:1375","ROOT-OS-ALPINE-318-CVE-2023-50269","SUSE-SU-2024:0296-1","SUSE-SU-2024:0298-1","SUSE-SU-2024:0455-1","UBUNTU-CVE-2023-50269","USN-6594-1","USN-6857-1","openSUSE-SU-2024:13631-1"],"status":"published","title":"SQUID-2023:10 Denial of Service in HTTP Request parsing","description":"Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.57627,"percentile":0.99093,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-674"],"published":"2023-12-14T17:09:25Z","modified":"2026-10-29T11:31:04Z","fixes":[{"ecosystem":"Alpine:v3.19","package":"squid","fixed_in":["6.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"squid","fixed_in":["6.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"squid","fixed_in":["6.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"squid","fixed_in":["6.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"squid","fixed_in":["6.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"squid","fixed_in":["6.6-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"squid","fixed_in":["7:4.11-4.module_el8.4.0+2163+318cdbb3.2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"squid34","fixed_in":["7:3.4.14-16.el6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"squid","fixed_in":["7:3.1.23-30.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-cgi","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-common","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-purge","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid3","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squidclient","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-cgi","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-common","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-purge","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid3","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squidclient","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"squid34","fixed_in":["7:3.4.14-16.el6.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"squid","fixed_in":["7:3.1.23-30.el6.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"squid","fixed_in":["7:4.15-1.module_el8.5.0+2164+24c223d9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"squid","fixed_in":["5.7-2+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"squid","fixed_in":["6.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"squid","fixed_in":["6.6-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"squid","fixed_in":["4.9-18.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"squid","fixed_in":["4.9-18.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"squid","fixed_in":["4.9-18.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"squid","fixed_in":["4.9-22.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"squid","fixed_in":["4.9-22.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"squid","fixed_in":["4.9-22.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid","fixed_in":["7:5.5-5.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid-debuginfo","fixed_in":["7:5.5-5.el9_2.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid-debugsource","fixed_in":["7:5.5-5.el9_2.4"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"squid","fixed_in":["5.9-r00071","5.9-r00074","5.9-r00073","5.9-r00072","5.9-r00075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"rootio-squid","fixed_in":["5.9-r00071","5.9-r00074","5.9-r00073","5.9-r00072","5.9-r00075"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","fixed_in":["3.5.12-1ubuntu7.16+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","fixed_in":["3.5.27-1ubuntu1.14+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"squid","fixed_in":["4.10-1ubuntu1.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"squid","fixed_in":["5.7-0ubuntu0.22.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"squid","fixed_in":["6.5-1ubuntu3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.19","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1"},{"fixed":"6.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1"},{"fixed":"6.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1"},{"fixed":"6.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1"},{"fixed":"6.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1"},{"fixed":"6.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1"},{"fixed":"6.6-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module_el8.9.0+3749+dbf371ed.10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-6.el9_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.7-5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module_el8.4.0+2163+318cdbb3.2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-16.el6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-16.el6.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-1.module_el8.5.0+2164+24c223d9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.1.tuxcare.els4"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-2+deb12u1"}]}],"versions":["5.7-2"]},{"source":"osv","ecosystem":"Debian:13","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u9"}]}],"versions":["4.6-1","4.6-1+deb10u1","4.6-1+deb10u2","4.6-1+deb10u3","4.6-1+deb10u4","4.6-1+deb10u5","4.6-1+deb10u6","4.6-1+deb10u7","4.6-1+deb10u8"],"bundled":5},{"source":"osv","ecosystem":"Debian:11","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-10+deb11u3"}]}],"versions":["4.13-10","4.13-10+deb11u1","4.13-10+deb11u2"],"bundled":8},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-2+deb12u1"}]}],"versions":["5.7-2"],"bundled":8},{"source":"osv","ecosystem":"Mageia:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-1.2.mga9"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-18.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-18.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-18.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-22.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-22.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-22.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+21068+0ecbc070.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+21068+0ecbc070.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+21068+0ecbc070.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+21069+a1561e3d.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+21069+a1561e3d.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+21069+a1561e3d.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module+el8.9.0+21530+59b09a5b.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module+el8.9.0+21530+59b09a5b.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module+el8.9.0+21530+59b09a5b.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-6.el9_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-6.el9_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-6.el9_3.8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+1437+df5ea8f0"}]}],"bundled":3},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-r00071"},{"fixed":"5.9-r00074"},{"fixed":"5.9-r00073"},{"fixed":"5.9-r00072"},{"fixed":"5.9-r00075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"rootio-squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-r00071"},{"fixed":"5.9-r00074"},{"fixed":"5.9-r00073"},{"fixed":"5.9-r00072"},{"fixed":"5.9-r00075"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-4.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-4.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.16+esm3"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8","3.5.12-1ubuntu7.9","3.5.12-1ubuntu7.10","3.5.12-1ubuntu7.11","3.5.12-1ubuntu7.12","3.5.12-1ubuntu7.13","3.5.12-1ubuntu7.14","3.5.12-1ubuntu7.15","3.5.12-1ubuntu7.16","3.5.12-1ubuntu7.16+esm1","3.5.12-1ubuntu7.16+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+esm2"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3","3.5.27-1ubuntu1.4","3.5.27-1ubuntu1.5","3.5.27-1ubuntu1.6","3.5.27-1ubuntu1.7","3.5.27-1ubuntu1.8","3.5.27-1ubuntu1.9","3.5.27-1ubuntu1.10","3.5.27-1ubuntu1.11","3.5.27-1ubuntu1.12","3.5.27-1ubuntu1.13","3.5.27-1ubuntu1.14","3.5.27-1ubuntu1.14+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.9"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7","4.10-1ubuntu1.8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-0ubuntu0.22.04.3"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1","5.7-0ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-1ubuntu3"}]}],"versions":["6.1-2ubuntu1","6.1-2ubuntu2","6.5-1ubuntu1","6.5-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.9"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7","4.10-1ubuntu1.8"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-0ubuntu0.22.04.3"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1","5.7-0ubuntu0.22.04.2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.16+esm3"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8","3.5.12-1ubuntu7.9","3.5.12-1ubuntu7.10","3.5.12-1ubuntu7.11","3.5.12-1ubuntu7.12","3.5.12-1ubuntu7.13","3.5.12-1ubuntu7.14","3.5.12-1ubuntu7.15","3.5.12-1ubuntu7.16","3.5.12-1ubuntu7.16+esm1","3.5.12-1ubuntu7.16+esm2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+esm2"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3","3.5.27-1ubuntu1.4","3.5.27-1ubuntu1.5","3.5.27-1ubuntu1.6","3.5.27-1ubuntu1.7","3.5.27-1ubuntu1.8","3.5.27-1ubuntu1.9","3.5.27-1ubuntu1.10","3.5.27-1ubuntu1.11","3.5.27-1ubuntu1.12","3.5.27-1ubuntu1.13","3.5.27-1ubuntu1.14","3.5.27-1ubuntu1.14+esm1"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6-2.1"}]}],"bundled":5}],"products":[{"vendor":"squid-cache","product":"squid"}],"references":[{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-wgq4-4cfg-c4x3","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","article","report"]},{"url":"http://www.squid-cache.org/Versions/v5/SQUID-2023_10.patch","tags":["x_refsource_MISC","x_transferred","Broken Link","web","article"]},{"url":"http://www.squid-cache.org/Versions/v6/SQUID-2023_10.patch","tags":["x_refsource_MISC","x_transferred","Broken Link","web","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEV66D3PAAY6K7TWDT3WZBLCPLASFJDC/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5QASTMCUSUEW3UOMKHZJB3FTONWSRXS/","tags":["x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00003.html","tags":["x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20240119-0005/","tags":["x_transferred","advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-50269","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1375","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50269","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-25111","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-25617","tags":["report"]},{"url":"https://bugzilla.redhat.com/2254663","tags":["report"]},{"url":"https://bugzilla.redhat.com/2264309","tags":["report"]},{"url":"https://bugzilla.redhat.com/2268366","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-1375.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1376","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-1376.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50269","tags":["web","advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1706026202.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2024-1706026402.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2024-1706026564.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1706026686.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1706026919.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2024-1706027577.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2024-1706027727.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1706697415.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1736503631.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50269.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-50269","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0102.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33003","tags":["report"]},{"url":"https://lwn.net/Articles/966404/","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2024/msg00043.html","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1947","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0397","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254663","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0397.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5824","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5824","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-543m-w2m2-g255","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46724","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46724","tags":["advisory"]},{"url":"http://www.squid-cache.org/Versions/v5/SQUID-2023_4.patch","tags":["article"]},{"url":"http://www.squid-cache.org/Versions/v6/SQUID-2023_4.patch","tags":["article"]},{"url":"https://github.com/squid-cache/squid/commit/b70f864940225dfe69f9f653f948e787f99c3810","tags":["article"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-73m6-jm96-c6r3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46728","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46728","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46728","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-cg5h-v6vc-w33f","tags":["article"]},{"url":"https://megamansec.github.io/Squid-Security-Audit/gopher-nullpointer.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49285","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49285","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49285","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49286","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49286","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49286","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50269","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-54574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2386026","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-54574","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54574","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/commit/a27bf4b84da23594150c7a86a23435df0b35b988","tags":["article"]},{"url":"https://github.com/squid-cache/squid/releases/tag/SQUID_6_4","tags":["article"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-w4gv-vw3f-29g3","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0771","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0771.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0772","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0772.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0773","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0773.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1085","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1085.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1153","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1153.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2268366","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1375.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-25111","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25111","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-72c2-c3wm-8qxc","tags":["article"]},{"url":"https://megamansec.github.io/Squid-Security-Audit/chunked-stackoverflow.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-25617","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25617","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-h5x6-w8mv-xfpr","tags":["article"]},{"url":"https://megamansec.github.io/Squid-Security-Audit/response-memleaks.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1376.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1787","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1787.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:1375","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240296-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217654","tags":["report"]},{"url":"https://bugzilla.suse.com/1219131","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23638","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240298-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240455-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-50269","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6594-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6857-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-49285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-49286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-28651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-41318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-25617","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49288","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-50269","title":"SQUID-2023:10 Denial of Service in HTTP Request parsing","description":"Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.","status":"published","published":"2023-12-14T17:09:25.168Z","modified":"2025-05-21T14:31:00.896Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:35:34.55015Z"}],"euvd":[{"id":"EUVD-2023-55081","description":"Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.","status":"published","published":"2023-12-14T17:09:25Z","modified":"2025-05-21T14:31:00Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:41.46277Z"}],"nvd":[{"id":"CVE-2023-50269","description":"Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.","status":"published","published":"2023-12-14T18:15:45.07Z","modified":"2026-06-17T06:39:25.343Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T14:08:54.696438Z"}],"osv":[{"id":"ALPINE-CVE-2023-50269","description":"Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.","status":"published","published":"2023-12-14T18:15:45.07Z","modified":"2026-10-26T17:17:58.658641878Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-32251","title":"CVE-2023-50269 affecting package squid 5.7-5","description":"Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.","status":"published","published":"2023-12-14T18:15:45Z","modified":"2026-04-21T04:26:44.748833Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"CVE-2023-50269","title":"SQUID-2023:10 Denial of Service in HTTP Request parsing","description":"Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.","status":"published","published":"2023-12-14T17:09:25.168Z","modified":"2026-10-28T02:30:37.627462768Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-674"],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"DEBIAN-CVE-2023-50269","description":"Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.","status":"published","published":"2023-12-14T18:15:45.07Z","modified":"2026-10-26T18:02:42.98380931Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"OESA-2023-1947","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\r\n\r\nSquid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid\u0026apos;s patch archives.(CVE-2023-50269)","status":"published","published":"2023-12-22T11:06:23Z","modified":"2026-08-18T01:18:06.296530682Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:0397","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T16:10:57Z","modified":"2026-07-12T10:02:23Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0771","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T16:11:27Z","modified":"2026-07-12T10:02:24Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0772","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T16:11:18Z","modified":"2026-07-12T10:02:25Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0773","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T16:11:08Z","modified":"2026-07-12T10:02:25Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:1085","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T16:11:38Z","modified":"2026-03-18T11:34:45.701358Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1153","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T16:11:50Z","modified":"2026-07-12T10:02:31Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1375","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T18:00:36Z","modified":"2026-09-09T10:02:59Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1376","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T18:00:45Z","modified":"2026-09-09T10:02:59Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1787","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T18:00:54Z","modified":"2026-06-26T11:13:34Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RLSA-2024:1375","title":"Important: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: denial of service in HTTP header parser (CVE-2024-25617)\n\n* squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111)\n\n* squid: denial of service in HTTP request parsing (CVE-2023-50269)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-05-07T19:11:47.341314Z","modified":"2025-05-07T19:38:06.256592Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-50269","description":"Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the follow_x_forwarded_for feature is configured. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives.","status":"published","published":"2023-12-14T18:15:00Z","modified":"2026-02-04T03:52:35.659922Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"ALSA-2024:1375","title":"Important: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: denial of service in HTTP header parser (CVE-2024-25617)\n* squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111)\n* squid: denial of service in HTTP request parsing (CVE-2023-50269)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-03-19T00:00:00Z","modified":"2026-10-29T11:02:26.381326446Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:1376","title":"Important: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: denial of service in HTTP header parser (CVE-2024-25617)\n* squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111)\n* squid: denial of service in HTTP request parsing (CVE-2023-50269)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-03-19T00:00:00Z","modified":"2026-10-29T11:31:04.850562246Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2024-1706026202","title":"squid: Fix of CVE-2023-50269","description":"- CVE-2023-50269: Limit the number of allowed X-Forwarded-For hops to prevent DoS","status":"published","published":"2024-01-23T16:10:06Z","modified":"2026-06-01T00:32:26.372950529Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1706026402","title":"squid34: Fix of CVE-2023-50269","description":"- CVE-2023-50269: Limit the number of allowed X-Forwarded-For hops to prevent DoS","status":"published","published":"2024-01-23T16:13:25Z","modified":"2026-06-01T00:33:25.20270719Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1706026564","title":"squid: Fix of CVE-2023-50269","description":"- CVE-2023-50269: Limit the number of allowed X-Forwarded-For hops to prevent DoS","status":"published","published":"2024-01-23T16:16:07Z","modified":"2026-06-01T00:33:25.123311836Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1706026686","title":"Fix CVE(s): CVE-2023-50269","description":"   * SECURITY UPDATE: Denial of Service in HTTP Request parsing\n     - debian/patches/CVE-2023-50269.patch: Limit the number of allowed\n       X-Forwarded-For hops\n     - CVE-2023-50269","status":"published","published":"2024-01-23T16:18:09Z","modified":"2026-06-04T10:03:21.923282Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1706026919","title":"Fix CVE(s): CVE-2023-50269","description":"   * SECURITY UPDATE: Denial of Service in HTTP Request parsing\n     - debian/patches/CVE-2023-50269.patch: Limit the number of allowed\n       X-Forwarded-For hops\n     - CVE-2023-50269","status":"published","published":"2024-01-23T16:22:02Z","modified":"2026-06-04T10:04:22.574873Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1706027577","title":"squid34: Fix of CVE-2023-50269","description":"- CVE-2023-50269: Limit the number of allowed X-Forwarded-For hops to prevent DoS","status":"published","published":"2024-01-23T16:33:00Z","modified":"2026-06-01T00:33:03.050810636Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1706027727","title":"squid: Fix of CVE-2023-50269","description":"- CVE-2023-50269: Limit the number of allowed X-Forwarded-For hops to prevent DoS","status":"published","published":"2024-01-23T16:35:30Z","modified":"2026-06-01T00:33:03.060134201Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1706697415","title":"squid: Fix of CVE-2023-50269","description":"- CVE-2023-50269: Limit the number of allowed X-Forwarded-For hops to prevent DoS","status":"published","published":"2024-01-31T10:36:58Z","modified":"2026-06-01T00:33:22.11785717Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2025-1736503631","title":"squid: Fix of 4 CVEs","description":"- CVE-2023-49285: Fix Buffer Overread bug to prevent Denial of Service attack\n- CVE-2023-49286: Fix Incorrect Check of Function Return Value bug in Helper\n  process management\n- CVE-2023-50269: Fix Uncontrolled Recursion bug in HTTP Request parsing by\n  limiting X-Forwarded-For header size to prevent Denial of Service attack.\n- CVE-2024-25617: Fix Collapse of Data into Unsafe Value bug to prevent Denial\n  of Service attack against HTTP header parsing","status":"published","published":"2025-01-10T10:07:18Z","modified":"2026-06-01T00:30:27.526530405Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"DLA-3709-1","title":"squid - security update","status":"published","published":"2024-01-09T00:00:00Z","modified":"2026-03-09T01:23:08.06653Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5637-1","title":"squid - security update","status":"published","published":"2024-03-08T00:00:00Z","modified":"2026-03-09T02:10:03.731725Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0102","title":"Updated squid packages fix security vulnerabilities","description":"Due to an Improper Validation of Specified Index bug, Squid versions\n3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl`\nare vulnerable to a Denial of Service attack against SSL Certificate\nvalidation. This problem allows a remote server to perform Denial of\nService against Squid Proxy by initiating a TLS Handshake with a\nspecially crafted SSL Certificate in a server certificate chain. This\nattack is limited to HTTPS and SSL-Bump. (CVE-2023-46724)\nDue to a Buffer Overread bug Squid is vulnerable to a Denial of Service\nattack against Squid HTTP Message processing. (CVE-2023-49285)\nDue to an Incorrect Check of Function Return Value bug Squid is\nvulnerable to a Denial of Service attack against its Helper process\nmanagement. (CVE-2023-49286)\nDue to an Uncontrolled Recursion bug in versions 2.6 through\n2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5,\nSquid may be vulnerable to a Denial of Service attack against HTTP\nRequest parsing. This problem allows a remote client to perform Denial\nof Service attack by sending a large X-Forwarded-For header when the\nfollow_x_forwarded_for feature is configured. (CVE-2023-50269)\nDue to an expired pointer reference bug, Squid prior to version 6.6 is\nvulnerable to a Denial of Service attack against Cache Manager error\nresponses. This problem allows a trusted client to perform Denial of\nService when generating error pages for Client Manager reports.\n(CVE-2024-23638)\n Starting in version 3.5.27 and prior to version 6.8, Squid may be\nvulnerable to a Denial of Service attack against HTTP Chunked decoder\ndue to an uncontrolled recursion bug. This problem allows a remote\nattacker to cause Denial of Service when sending a crafted, chunked,\nencoded HTTP Message. (CVE-2024-25111)\nDue to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable\nto a Denial of Service attack against HTTP header parsing. This problem\nallows a remote client or a remote server to perform Denial of Service\nwhen sending oversized headers in HTTP messages. In versions of Squid\nprior to 6.5 this can be achieved if the request_header_max_size or\nreply_header_max_size settings are unchanged from the default.\n(CVE-2024-25617)\n","status":"published","published":"2024-03-31T03:27:58Z","modified":"2026-04-16T04:42:22.006828055Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13631-1","title":"squid-6.6-2.1 on GA media","description":"These are all security issues fixed in the squid-6.6-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:14.970905Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"ROOT-OS-ALPINE-318-CVE-2023-50269","title":"CVE-2023-50269 in squid - Patched by Root","description":"Root has patched CVE-2023-50269 in the squid package for Root:Alpine:3.18. Multiple fixed versions available.","status":"published","published":"2026-09-29T10:43:34Z","modified":"2026-09-29T11:15:09.200603918Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"SUSE-SU-2024:0296-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654)\n- CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131)\n","status":"published","published":"2024-02-01T10:33:25Z","modified":"2026-02-04T04:38:59.768665Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0298-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654)\n- CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131)\n","status":"published","published":"2024-02-01T12:33:45Z","modified":"2026-02-04T03:43:35.047683Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0455-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654)\n- CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131)\n","status":"published","published":"2024-02-13T09:44:07Z","modified":"2026-02-04T03:18:04.03589Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"USN-6594-1","title":"squid vulnerabilities","description":"Joshua Rogers discovered that Squid incorrectly handled HTTP message\nprocessing. A remote attacker could possibly use this issue to cause\nSquid to crash, resulting in a denial of service. (CVE-2023-49285)\n\nJoshua Rogers discovered that Squid incorrectly handled Helper process\nmanagement. A remote attacker could possibly use this issue to cause\nSquid to crash, resulting in a denial of service. (CVE-2023-49286)\n\nJoshua Rogers discovered that Squid incorrectly handled HTTP request\nparsing. A remote attacker could possibly use this issue to cause\nSquid to crash, resulting in a denial of service. (CVE-2023-50269)\n","status":"published","published":"2024-01-23T03:05:16Z","modified":"2026-02-10T04:43:28Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6857-1","title":"squid3 vulnerabilities","description":"Joshua Rogers discovered that Squid incorrectly handled requests with the\nurn: scheme. A remote attacker could possibly use this issue to cause\nSquid to consume resources, leading to a denial of service. This issue\nonly affected Ubuntu 16.04 LTS. (CVE-2021-28651)\n\nIt was discovered that Squid incorrectly handled SSPI and SMB\nauthentication. A remote attacker could use this issue to cause Squid to\ncrash, resulting in a denial of service, or possibly obtain sensitive\ninformation. This issue only affected Ubuntu 16.04 LTS. (CVE-2022-41318)\n\nJoshua Rogers discovered that Squid incorrectly handled HTTP message\nprocessing. A remote attacker could possibly use this issue to cause\nSquid to crash, resulting in a denial of service. (CVE-2023-49285)\n\nJoshua Rogers discovered that Squid incorrectly handled Helper process\nmanagement. A remote attacker could possibly use this issue to cause\nSquid to crash, resulting in a denial of service. (CVE-2023-49286)\n\nJoshua Rogers discovered that Squid incorrectly handled HTTP request\nparsing. A remote attacker could possibly use this issue to cause\nSquid to crash, resulting in a denial of service. \n(CVE-2023-50269, CVE-2024-25617)\n","status":"published","published":"2024-06-27T10:48:19Z","modified":"2026-06-25T13:32:28.765713346Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}