{"id":"CVE-2023-5824","aliases":["ALSA-2023:7465","ALSA-2023:7668","AZL-31904","AZL-63100","CLSA-2024-1730369054","CLSA-2024-1730480855","CLSA-2024-1735311253","CLSA-2025-1761844638","DEBIAN-CVE-2023-5824","DLA-4312-1","DSA-5982-1","EUVD-2023-58107","GHSA-543m-w2m2-g255","MGASA-2024-0126","OESA-2026-1048","OESA-2026-1049","OESA-2026-1050","RHSA-2023:7465","RHSA-2023:7668","RHSA-2024:0072","RHSA-2024:0397","RHSA-2024:0771","RHSA-2024:0772","RHSA-2024:0773","RHSA-2024:1153","RLSA-2023:7668","SUSE-SU-2026:4909-1","UBUNTU-CVE-2023-5824","USN-6728-1","USN-6728-3","openSUSE-SU-2024:13398-1"],"status":"published","title":"Squid: dos against http and https","description":"A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.03284,"percentile":0.88565,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-755"],"published":"2023-11-03T07:56:36Z","modified":"2026-11-06T10:58:10Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"squid","fixed_in":["7:5.5-6.el9_3.2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"squid","fixed_in":["6.5-1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"squid","fixed_in":["7:4.11-4.module_el8.4.0+2226+832d496e.2.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"squid","fixed_in":["7:4.15-1.module_el8.5.0+2228+98c2f670.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"squid","fixed_in":["7:5.5-5.el9_2.1.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"squid","fixed_in":["5.7-2+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"squid","fixed_in":["6.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"squid","fixed_in":["6.5-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"squid","fixed_in":["4.9-29.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"squid","fixed_in":["4.9-25.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"squid","fixed_in":["4.9-29.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.9.0+1437+df5ea8f0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"squid","fixed_in":["7:4.15-7.module+el8.9.0+1568+6d4fd5d4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"squid","fixed_in":["4.10-1ubuntu1.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"squid","fixed_in":["5.7-0ubuntu0.22.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"squid","fixed_in":["6.5-1ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-6.el9_3.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module_el8.9.0+3696+b881db49.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.7-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module_el8.4.0+2226+832d496e.2.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-1.module_el8.5.0+2228+98c2f670.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.1.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-2+deb12u3"}]}],"versions":["5.7-2","5.7-2+deb12u1","5.7-2+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-10+deb11u5"}]}],"versions":["4.13-10","4.13-10+deb11u1","4.13-10+deb11u2","4.13-10+deb11u3","4.13-10+deb11u4"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-2+deb12u3"}]}],"versions":["5.7-2","5.7-2+deb12u1","5.7-2+deb12u2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-1.3.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-29.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-25.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-29.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-6.el9_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-6.el9_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-6.el9_3.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module+el8.9.0+20806+014d88aa.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module+el8.9.0+20806+014d88aa.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module+el8.9.0+20806+014d88aa.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.3"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.3"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.3"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+21068+0ecbc070.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+21068+0ecbc070.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+21068+0ecbc070.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+21069+a1561e3d.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+21069+a1561e3d.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+21069+a1561e3d.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+21173+22259b09.7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+21174+3894a031.6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+1437+df5ea8f0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-7.module+el8.9.0+1568+6d4fd5d4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.41.1"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8","3.5.12-1ubuntu7.9","3.5.12-1ubuntu7.10","3.5.12-1ubuntu7.11","3.5.12-1ubuntu7.12","3.5.12-1ubuntu7.13","3.5.12-1ubuntu7.14","3.5.12-1ubuntu7.15","3.5.12-1ubuntu7.16","3.5.12-1ubuntu7.16+esm1","3.5.12-1ubuntu7.16+esm2","3.5.12-1ubuntu7.16+esm3","3.5.12-1ubuntu7.16+esm4","3.5.12-1ubuntu7.16+esm5","3.5.12-1ubuntu7.16+esm6","3.5.12-1ubuntu7.16+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3","3.5.27-1ubuntu1.4","3.5.27-1ubuntu1.5","3.5.27-1ubuntu1.6","3.5.27-1ubuntu1.7","3.5.27-1ubuntu1.8","3.5.27-1ubuntu1.9","3.5.27-1ubuntu1.10","3.5.27-1ubuntu1.11","3.5.27-1ubuntu1.12","3.5.27-1ubuntu1.13","3.5.27-1ubuntu1.14","3.5.27-1ubuntu1.14+esm1","3.5.27-1ubuntu1.14+esm2","3.5.27-1ubuntu1.14+esm3","3.5.27-1ubuntu1.14+esm4","3.5.27-1ubuntu1.14+esm5","3.5.27-1ubuntu1.14+esm6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.12"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7","4.10-1ubuntu1.8","4.10-1ubuntu1.9","4.10-1ubuntu1.10","4.10-1ubuntu1.11"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-0ubuntu0.22.04.4"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1","5.7-0ubuntu0.22.04.2","5.7-0ubuntu0.22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-1ubuntu1"}]}],"versions":["6.1-2ubuntu1","6.1-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.10"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7","4.10-1ubuntu1.8","4.10-1ubuntu1.9"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-0ubuntu0.22.04.4"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1","5.7-0ubuntu0.22.04.2","5.7-0ubuntu0.22.04.3"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.12"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7","4.10-1ubuntu1.8","4.10-1ubuntu1.9","4.10-1ubuntu1.10","4.10-1ubuntu1.11"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-1.1"}]}],"bundled":5}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 extended update support"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"squid-cache","product":"squid"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2023:7465","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7668","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0072","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0397","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0771","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0772","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0773","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1153","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5824","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245914","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","report"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-543m-w2m2-g255","tags":["x_transferred","Vendor Advisory","advisory","article","report"]},{"url":"https://security.netapp.com/advisory/ntap-20231130-0003/","tags":["x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00027.html","tags":["web"]},{"url":"https://bugzilla.redhat.com/2245914","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-7465.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-7668.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2023-49288.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-54574.html","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5824","tags":["web","advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1730369054.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1730480855.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1735311253.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761844638.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5824.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-5824","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0126.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33091","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6728-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1048","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1049","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1050","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7465.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5824","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252918","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49288","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49288","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-54574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2386026","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-54574","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54574","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/commit/a27bf4b84da23594150c7a86a23435df0b35b988","tags":["article"]},{"url":"https://github.com/squid-cache/squid/releases/tag/SQUID_6_4","tags":["article"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-w4gv-vw3f-29g3","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7668.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252926","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0072.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46724","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46724","tags":["advisory"]},{"url":"http://www.squid-cache.org/Versions/v5/SQUID-2023_4.patch","tags":["article"]},{"url":"http://www.squid-cache.org/Versions/v6/SQUID-2023_4.patch","tags":["article"]},{"url":"https://github.com/squid-cache/squid/commit/b70f864940225dfe69f9f653f948e787f99c3810","tags":["article"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-73m6-jm96-c6r3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46728","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46728","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46728","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-cg5h-v6vc-w33f","tags":["article"]},{"url":"https://megamansec.github.io/Squid-Security-Audit/gopher-nullpointer.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49285","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49285","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49285","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49286","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49286","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49286","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254663","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0397.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50269","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50269","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50269","tags":["advisory"]},{"url":"http://www.squid-cache.org/Versions/v5/SQUID-2023_10.patch","tags":["article"]},{"url":"http://www.squid-cache.org/Versions/v6/SQUID-2023_10.patch","tags":["article"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-wgq4-4cfg-c4x3","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0771.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0772.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0773.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1153.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:7668","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264909-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216496","tags":["report"]},{"url":"https://bugzilla.suse.com/1217825","tags":["report"]},{"url":"https://bugzilla.suse.com/1223329","tags":["report"]},{"url":"https://bugzilla.suse.com/1228150","tags":["report"]},{"url":"https://bugzilla.suse.com/1252281","tags":["report"]},{"url":"https://bugzilla.suse.com/1260452","tags":["report"]},{"url":"https://bugzilla.suse.com/1260453","tags":["report"]},{"url":"https://bugzilla.suse.com/1260454","tags":["report"]},{"url":"https://bugzilla.suse.com/1268272","tags":["report"]},{"url":"https://bugzilla.suse.com/1268320","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-32748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50012","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-5824","tags":["report"]},{"url":"https://lists.squid-cache.org/pipermail/squid-announce/2023-October/000155.html","tags":["report"]},{"url":"https://megamansec.github.io/Squid-Security-Audit/cache-headers.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6728-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6728-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-49288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-23638","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-25111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-25617","tags":["report"]},{"url":"https://launchpad.net/bugs/2060880","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46848","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-5824","title":"Squid: dos against http and https","description":"A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.","status":"published","published":"2023-11-03T07:56:36.369Z","modified":"2026-11-04T21:06:17.325Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-755"],"updated_at":"2026-11-04T22:39:14.734949Z"}],"euvd":[{"id":"EUVD-2023-58107","description":"A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.","status":"published","published":"2023-11-03T07:56:36Z","modified":"2026-11-04T21:06:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-04T22:46:32.144626Z"}],"nvd":[{"id":"CVE-2023-5824","description":"A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.","status":"published","published":"2023-11-03T08:15:08.27Z","modified":"2026-11-04T21:17:26.09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-755"],"updated_at":"2026-11-04T23:43:36.946093Z"}],"osv":[{"id":"AZL-31904","title":"CVE-2023-5824 affecting package squid 5.7-5","description":"A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.","status":"published","published":"2023-11-03T08:15:08Z","modified":"2026-04-21T04:26:34.52627Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-63100","title":"CVE-2023-5824 affecting package squid for versions less than 6.5-1","description":"A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.","status":"published","published":"2023-11-03T08:15:08Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"CVE-2023-5824","title":"Squid: dos against http and https","description":"A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.","status":"published","published":"2023-11-03T07:56:36.369Z","modified":"2026-11-05T21:15:43.373606922Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-755"],"updated_at":"2026-11-05T22:01:21.792402Z"},{"id":"DEBIAN-CVE-2023-5824","description":"A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.","status":"published","published":"2023-11-03T08:15:08.27Z","modified":"2026-11-05T09:47:39.374506431Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T13:31:24.64316Z"},{"id":"OESA-2026-1048","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.(CVE-2023-5824)","status":"published","published":"2026-01-09T11:10:05Z","modified":"2026-08-18T01:19:26.698117197Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1049","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.(CVE-2023-5824)","status":"published","published":"2026-01-09T11:10:05Z","modified":"2026-08-18T01:19:26.211874241Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1050","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.(CVE-2023-5824)","status":"published","published":"2026-01-09T11:10:05Z","modified":"2026-08-18T01:19:25.710054071Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"RHSA-2023:7465","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T15:58:46Z","modified":"2026-07-12T10:02:15Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2023:7668","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T15:58:54Z","modified":"2026-07-12T10:02:17Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0072","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T16:10:39Z","modified":"2026-07-12T10:02:22Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0397","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T16:10:57Z","modified":"2026-07-12T10:02:23Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0771","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T16:11:27Z","modified":"2026-07-12T10:02:24Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0772","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T16:11:18Z","modified":"2026-07-12T10:02:25Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0773","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-09-16T16:11:08Z","modified":"2026-07-12T10:02:25Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:1153","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T16:11:50Z","modified":"2026-07-12T10:02:31Z","cvss":[{"version":"3.1","score":8.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"UBUNTU-CVE-2023-5824","description":"A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.","status":"published","published":"2023-11-03T08:15:00Z","modified":"2026-10-20T22:45:06.5601653Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"ALSA-2023:7465","title":"Important: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: DoS against HTTP and HTTPS (CVE-2023-5824)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-11-22T00:00:00Z","modified":"2026-10-29T11:31:34.693952848Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:7668","title":"Important: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: DoS against HTTP and HTTPS (CVE-2023-5824)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-12-06T00:00:00Z","modified":"2026-11-06T10:58:10.940372653Z","updated_at":"2026-11-06T11:08:40.431174Z"},{"id":"CLSA-2024-1730369054","title":"squid: Fix of CVE-2023-5824","description":"- CVE-2023-5824: Fix improper handling of structural elements to prevent DoS\n  attacks against HTTP and HTTPS clients","status":"published","published":"2024-10-31T10:04:17Z","modified":"2026-06-01T00:33:11.856061738Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1730480855","title":"squid: Fix of CVE-2023-5824","description":"- CVE-2023-5824: Remove serialized HTTP headers from storeClientCopy()","status":"published","published":"2024-11-01T17:07:40Z","modified":"2026-06-01T00:33:22.879356006Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1735311253","title":"squid: Fix of CVE-2023-5824","description":"- CVE-2023-5824: do not send serialized HTTP response header bytes in\n  storeClientCopy() answers. Ignore serialized header size when calling\n  storeClientCopy().","status":"published","published":"2024-12-27T14:54:19Z","modified":"2026-06-01T00:30:20.022450655Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1761844638","title":"Fix CVE(s): CVE-2023-49288, CVE-2023-5824","description":"   * SECURITY UPDATE: excessive cached HTTP response header size causing worker\n     process stall or crash\n     - debian/patches/CVE-2023-5824.patch: Refactor serialized HTTP response header\n       handling to prevent cache flow\n     - CVE-2023-5824\n   * SECURITY UPDATE: Use-After-Free in the HTTP Collapsed Forwarding Feature\n     - debian/patches/CVE-2023-5824.patch: Removed Use-After-Free during refactor\n       serialized HTTP response header\n     - CVE-2023-49288","status":"published","published":"2025-10-30T18:04:01Z","modified":"2026-06-04T10:04:15.258591Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"DLA-4312-1","title":"squid - security update","status":"published","published":"2025-09-27T00:00:00Z","modified":"2025-09-27T20:33:13.425919Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5982-1","title":"squid - security update","status":"published","published":"2025-08-21T00:00:00Z","modified":"2026-03-09T02:09:14.168388Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2024-0126","title":"Updated squid packages fix security vulnerabilities","description":"Affected versions of squid are subject to a Use-After-Free bug which\ncan lead to a Denial of Service attack via collapsed forwarding. All\nversions of Squid from 3.5 up to and including 5.9 configured with\n\"collapsed_forwarding on\" are vulnerable. Configurations with\n\"collapsed_forwarding off\" or without a \"collapsed_forwarding\" directive\nare not vulnerable. (CVE-2023-49288)\nSquid is vulnerable to Denial of Service attack against HTTP and HTTPS\nclients due to an Improper Handling of Structural Elements bug.\n(CVE-2023-5824)\n","status":"published","published":"2024-04-12T20:45:19Z","modified":"2026-04-16T04:41:17.546311692Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13398-1","title":"squid-6.4-1.1 on GA media","description":"These are all security issues fixed in the squid-6.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:14:07.068403Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2023:7668","title":"Important: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: DoS against HTTP and HTTPS (CVE-2023-5824)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-12-06T23:16:33.283573Z","modified":"2026-02-05T00:45:07.518925Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2026:4909-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2023-5824: Multiple issues in HTTP response caching (bsc#1216496).\n- CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature (bsc#1217825).\n- CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of\n  credentials a trusted client uses to authenticate (bsc#1252281).\n- CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453).\n- CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454).\n- CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452).\n- CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic\n  correctness of input (bsc#1268272).\n- CVE-2026-50012: Improper Input Validation bug (bsc#1268320).\n","status":"published","published":"2026-10-26T07:22:12Z","modified":"2026-10-26T20:15:05.607759754Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-6728-1","title":"squid vulnerabilities","description":"Joshua Rogers discovered that Squid incorrectly handled collapsed\nforwarding. A remote attacker could possibly use this issue to cause Squid\nto crash, resulting in a denial of service. This issue only affected Ubuntu\n20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-49288)\n\nJoshua Rogers discovered that Squid incorrectly handled certain structural\nelements. A remote attacker could possibly use this issue to cause Squid to\ncrash, resulting in a denial of service. (CVE-2023-5824)\n\nJoshua Rogers discovered that Squid incorrectly handled Cache Manager error\nresponses. A remote trusted client can possibly use this issue to cause\nSquid to crash, resulting in a denial of service. (CVE-2024-23638)\n\nJoshua Rogers discovered that Squid incorrectly handled the HTTP Chunked\ndecoder. A remote attacker could possibly use this issue to cause Squid to\nstop responding, resulting in a denial of service. (CVE-2024-25111)\n\nJoshua Rogers discovered that Squid incorrectly handled HTTP header\nparsing. A remote trusted client can possibly use this issue to cause\nSquid to crash, resulting in a denial of service. (CVE-2024-25617)\n","status":"published","published":"2024-04-10T16:38:15Z","modified":"2026-04-27T17:17:23.502301109Z","updated_at":"2026-11-02T16:58:17.914523Z"},{"id":"USN-6728-3","title":"squid vulnerability","description":"USN-6728-1 fixed vulnerabilities in Squid. The fix for CVE-2023-5824 caused\nSquid to crash in certain environments on Ubuntu 20.04 LTS and was disabled\nin USN-6728-2. The problematic fix for CVE-2023-5824 has now been corrected\nand reinstated in this update.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n Joshua Rogers discovered that Squid incorrectly handled collapsed\n forwarding. A remote attacker could possibly use this issue to cause Squid\n to crash, resulting in a denial of service. This issue only affected Ubuntu\n 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-49288)\n \n Joshua Rogers discovered that Squid incorrectly handled certain structural\n elements. A remote attacker could possibly use this issue to cause Squid to\n crash, resulting in a denial of service. (CVE-2023-5824)\n \n Joshua Rogers discovered that Squid incorrectly handled Cache Manager error\n responses. A remote trusted client can possibly use this issue to cause\n Squid to crash, resulting in a denial of service. (CVE-2024-23638)\n \n Joshua Rogers discovered that Squid incorrectly handled the HTTP Chunked\n decoder. A remote attacker could possibly use this issue to cause Squid to\n stop responding, resulting in a denial of service. (CVE-2024-25111)\n \n Joshua Rogers discovered that Squid incorrectly handled HTTP header\n parsing. A remote trusted client can possibly use this issue to cause\n Squid to crash, resulting in a denial of service. (CVE-2024-25617)\n","status":"published","published":"2024-04-23T11:20:04Z","modified":"2026-04-27T17:11:06.117713Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}