{"id":"CVE-2024-23638","aliases":["ALSA-2024:4861","ALSA-2024:9644","AZL-34001","CLSA-2024-1733142081","CLSA-2024-1733142094","CLSA-2024-1734542622","CLSA-2025-1736860159","DEBIAN-CVE-2024-23638","DSA-5637-1","EUVD-2024-21127","GHSA-j49p-553x-48rx","MGASA-2024-0102","OESA-2024-1124","RHSA-2024:4861","RHSA-2024:9644","RLSA-2024:4861","RLSA-2024:9644","ROOT-OS-ALPINE-318-CVE-2024-23638","SUSE-SU-2024:0296-1","SUSE-SU-2024:0298-1","SUSE-SU-2024:0455-1","UBUNTU-CVE-2024-23638","USN-6728-1","openSUSE-SU-2024:13631-1"],"status":"published","title":"SQUID-2023:11 Denial of Service in Cache Manager","description":"Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when generating error pages for Client Manager reports. Squid older than 5.0.5 have not been tested and should be assumed to be vulnerable. All Squid-5.x up to and including 5.9 are vulnerable. All Squid-6.x up to and including 6.5 are vulnerable. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. As a workaround, prevent access to Cache Manager using Squid's main access control: `http_access deny manager`.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.6005,"percentile":0.99143,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-672","CWE-825"],"published":"2024-01-23T23:23:19Z","modified":"2026-11-02T12:00:34Z","fixes":[{"ecosystem":"TuxCare:CentOS:8.4","package":"squid","fixed_in":["7:4.11-4.module_el8.4.0+2237+77309fa2.2.tuxcare.els14"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"squid","fixed_in":["7:4.15-1.module_el8.5.0+2238+84d1ef7b.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"squid","fixed_in":["7:4.15-10.module_el8+2247+604b7535.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"squid","fixed_in":["5.7-2+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"squid","fixed_in":["6.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"squid","fixed_in":["6.6-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"squid","fixed_in":["4.9-19.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"squid","fixed_in":["4.9-19.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"squid","fixed_in":["4.9-23.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"squid","fixed_in":["4.9-23.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"squid","fixed_in":["4.9-23.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"squid","fixed_in":["4.9-23.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"squid","fixed_in":["5.9-r00071","5.9-r00074","5.9-r00073","5.9-r00072","5.9-r00075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"rootio-squid","fixed_in":["5.9-r00071","5.9-r00074","5.9-r00073","5.9-r00072","5.9-r00075"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"squid","fixed_in":["4.10-1ubuntu1.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"squid","fixed_in":["5.7-0ubuntu0.22.04.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-13.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module_el8.10.0+3916+ed00a4a0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.7-5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module_el8.4.0+2237+77309fa2.2.tuxcare.els14"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-1.module_el8.5.0+2238+84d1ef7b.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module_el8+2247+604b7535.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.1.tuxcare.els5"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-2+deb12u1"}]}],"versions":["5.7-2"]},{"source":"osv","ecosystem":"Debian:13","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-10+deb11u3"}]}],"versions":["4.13-10","4.13-10+deb11u1","4.13-10+deb11u2"],"bundled":8},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-2+deb12u1"}]}],"versions":["5.7-2"],"bundled":8},{"source":"osv","ecosystem":"Mageia:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-1.2.mga9"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-19.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-19.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-23.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-23.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-23.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-23.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-13.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-13.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-13.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module+el8.10.0+22489+b920747d.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module+el8.10.0+22489+b920747d.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module+el8.10.0+22489+b920747d.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-13.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+1437+df5ea8f0"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module+el8.10.0+1758+80ba9f4b"}]}],"bundled":2},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-r00071"},{"fixed":"5.9-r00074"},{"fixed":"5.9-r00073"},{"fixed":"5.9-r00072"},{"fixed":"5.9-r00075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"rootio-squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-r00071"},{"fixed":"5.9-r00074"},{"fixed":"5.9-r00073"},{"fixed":"5.9-r00072"},{"fixed":"5.9-r00075"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-4.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-4.41.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17-150000.5.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-150400.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8","3.5.12-1ubuntu7.9","3.5.12-1ubuntu7.10","3.5.12-1ubuntu7.11","3.5.12-1ubuntu7.12","3.5.12-1ubuntu7.13","3.5.12-1ubuntu7.14","3.5.12-1ubuntu7.15","3.5.12-1ubuntu7.16","3.5.12-1ubuntu7.16+esm1","3.5.12-1ubuntu7.16+esm2","3.5.12-1ubuntu7.16+esm3","3.5.12-1ubuntu7.16+esm4","3.5.12-1ubuntu7.16+esm5","3.5.12-1ubuntu7.16+esm6","3.5.12-1ubuntu7.16+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3","3.5.27-1ubuntu1.4","3.5.27-1ubuntu1.5","3.5.27-1ubuntu1.6","3.5.27-1ubuntu1.7","3.5.27-1ubuntu1.8","3.5.27-1ubuntu1.9","3.5.27-1ubuntu1.10","3.5.27-1ubuntu1.11","3.5.27-1ubuntu1.12","3.5.27-1ubuntu1.13","3.5.27-1ubuntu1.14","3.5.27-1ubuntu1.14+esm1","3.5.27-1ubuntu1.14+esm2","3.5.27-1ubuntu1.14+esm3","3.5.27-1ubuntu1.14+esm4","3.5.27-1ubuntu1.14+esm5","3.5.27-1ubuntu1.14+esm6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.10"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7","4.10-1ubuntu1.8","4.10-1ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-0ubuntu0.22.04.4"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1","5.7-0ubuntu0.22.04.2","5.7-0ubuntu0.22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.10"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7","4.10-1ubuntu1.8","4.10-1ubuntu1.9"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-0ubuntu0.22.04.4"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1","5.7-0ubuntu0.22.04.2","5.7-0ubuntu0.22.04.3"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6-2.1"}]}],"bundled":5}],"products":[{"vendor":"squid-cache","product":"squid"}],"references":[{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-j49p-553x-48rx","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article","report"]},{"url":"https://github.com/squid-cache/squid/commit/290ae202883ac28a48867079c2fb34c40efd382b","tags":["x_refsource_MISC","x_transferred","Patch","fix","article"]},{"url":"https://github.com/squid-cache/squid/commit/e8118a7381213f5cfcdeb4cec1d2d854bfd261c8","tags":["x_refsource_MISC","x_transferred","Patch","fix","article"]},{"url":"https://megamansec.github.io/Squid-Security-Audit/stream-assert.html","tags":["x_refsource_MISC","x_transferred","Exploit","web","article","report"]},{"url":"http://www.squid-cache.org/Versions/v5/SQUID-2023_11.patch","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","web","article"]},{"url":"http://www.squid-cache.org/Versions/v6/SQUID-2023_11.patch","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","web","article"]},{"url":"https://security.netapp.com/advisory/ntap-20240208-0010/","tags":["x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7R4KPSO3MQT3KAOZV7LC2GG3CYMCGK7H/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWQHRDRHDM5PQTU6BHH4C5KGL37X6TVI/","tags":["x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:4861","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23638","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-37894","tags":["report"]},{"url":"https://bugzilla.redhat.com/2260051","tags":["report"]},{"url":"https://bugzilla.redhat.com/2294353","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-4861.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-45802","tags":["report"]},{"url":"https://bugzilla.redhat.com/2322154","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-9644.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23638","tags":["web","advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1733142081.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1733142094.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos8stream-els/CLSA-2024-1734542622.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1736860159.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23638.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-23638","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0102.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33003","tags":["report"]},{"url":"https://lwn.net/Articles/966404/","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2024/msg00043.html","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1124","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2294353","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4861.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23638","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-37894","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-37894","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-wgvf-q977-9xjg","tags":["article"]},{"url":"https://megamansec.github.io/Squid-Security-Audit/esi-underflow.html","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2322154","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9644.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-45802","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45802","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-f975-v7qw-q7hj","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2024:4861","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9644","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240296-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217654","tags":["report"]},{"url":"https://bugzilla.suse.com/1219131","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23638","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240298-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240455-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-23638","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6728-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-5824","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-49288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-25111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-25617","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-49288","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-23638","title":"SQUID-2023:11 Denial of Service in Cache Manager","description":"Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when generating error pages for Client Manager reports. Squid older than 5.0.5 have not been tested and should be assumed to be vulnerable. All Squid-5.x up to and including 5.9 are vulnerable. All Squid-6.x up to and including 6.5 are vulnerable. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. As a workaround, prevent access to Cache Manager using Squid's main access control: `http_access deny manager`.","status":"published","published":"2024-01-23T23:23:19.07Z","modified":"2025-06-17T21:19:27.553Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-825"],"updated_at":"2026-11-02T14:34:05.823187Z"}],"euvd":[{"id":"EUVD-2024-21127","description":"Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when generating error pages for Client Manager reports. Squid older than 5.0.5 have not been tested and should be assumed to be vulnerable. All Squid-5.x up to and including 5.9 are vulnerable. All Squid-6.x up to and including 6.5 are vulnerable. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. As a workaround, prevent access to Cache Manager using Squid's main access control: `http_access deny manager`.","status":"published","published":"2024-01-23T23:23:19Z","modified":"2025-06-17T21:19:27Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:21.000623Z"}],"nvd":[{"id":"CVE-2024-23638","description":"Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when generating error pages for Client Manager reports. Squid older than 5.0.5 have not been tested and should be assumed to be vulnerable. All Squid-5.x up to and including 5.9 are vulnerable. All Squid-6.x up to and including 6.5 are vulnerable. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. As a workaround, prevent access to Cache Manager using Squid's main access control: `http_access deny manager`.","status":"published","published":"2024-01-24T00:15:08.573Z","modified":"2026-06-17T07:13:16.913Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-825","CWE-672"],"updated_at":"2026-11-02T14:09:32.147098Z"}],"osv":[{"id":"AZL-34001","title":"CVE-2024-23638 affecting package squid 5.7-5","description":"Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when generating error pages for Client Manager reports. Squid older than 5.0.5 have not been tested and should be assumed to be vulnerable. All Squid-5.x up to and including 5.9 are vulnerable. All Squid-6.x up to and including 6.5 are vulnerable. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. As a workaround, prevent access to Cache Manager using Squid's main access control: `http_access deny manager`.","status":"published","published":"2024-01-24T00:15:08Z","modified":"2026-04-21T04:27:00.241532Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"CVE-2024-23638","title":"SQUID-2023:11 Denial of Service in Cache Manager","description":"Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when generating error pages for Client Manager reports. Squid older than 5.0.5 have not been tested and should be assumed to be vulnerable. All Squid-5.x up to and including 5.9 are vulnerable. All Squid-6.x up to and including 6.5 are vulnerable. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. As a workaround, prevent access to Cache Manager using Squid's main access control: `http_access deny manager`.","status":"published","published":"2024-01-23T23:23:19.07Z","modified":"2026-10-28T10:36:24.487577565Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-825"],"updated_at":"2026-11-02T15:44:38.897406Z"},{"id":"DEBIAN-CVE-2024-23638","description":"Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when generating error pages for Client Manager reports. Squid older than 5.0.5 have not been tested and should be assumed to be vulnerable. All Squid-5.x up to and including 5.9 are vulnerable. All Squid-6.x up to and including 6.5 are vulnerable. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. As a workaround, prevent access to Cache Manager using Squid's main access control: `http_access deny manager`.","status":"published","published":"2024-01-24T00:15:08.573Z","modified":"2026-11-02T12:00:34.35544213Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"OESA-2024-1124","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\r\n\r\nSquid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when generating error pages for Client Manager reports. Squid older than 5.0.5 have not been tested and should be assumed to be vulnerable. All Squid-5.x up to and including 5.9 are vulnerable. All Squid-6.x up to and including 6.5 are vulnerable. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid\u0026apos;s patch archives. As a workaround, prevent access to Cache Manager using Squid\u0026apos;s main access control: `http_access deny manager`.(CVE-2024-23638)","status":"published","published":"2024-02-02T11:06:34Z","modified":"2026-08-18T01:18:14.492597168Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:4861","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-09-16T20:34:55Z","modified":"2026-03-18T11:35:21.762495Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:9644","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-11-15T20:47:10Z","modified":"2026-10-09T10:12:59Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"UBUNTU-CVE-2024-23638","description":"Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attack against Cache Manager error responses. This problem allows a trusted client to perform Denial of Service when generating error pages for Client Manager reports. Squid older than 5.0.5 have not been tested and should be assumed to be vulnerable. All Squid-5.x up to and including 5.9 are vulnerable. All Squid-6.x up to and including 6.5 are vulnerable. This bug is fixed by Squid version 6.6. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. As a workaround, prevent access to Cache Manager using Squid's main access control: `http_access deny manager`.","status":"published","published":"2024-01-24T00:15:00Z","modified":"2026-10-20T22:45:06.619398101Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"ALSA-2024:4861","title":"Moderate: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638)\n* squid: Out-of-bounds write error may lead to Denial of Service (CVE-2024-37894)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-07-25T00:00:00Z","modified":"2026-10-29T11:31:48.351464311Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:9644","title":"Important: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.  \n\nSecurity Fix(es):  \n\n  * squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638)\n  * squid: Denial of Service processing ESI response content (CVE-2024-45802)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-14T00:00:00Z","modified":"2026-10-29T11:02:22.189676161Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"CLSA-2024-1733142081","title":"squid: Fix of CVE-2024-23638","description":"- CVE-2024-23638: Fix expired pointer reference bug to prevent Denial of Service\n  attack","status":"published","published":"2024-12-02T12:21:27Z","modified":"2026-06-01T00:33:12.522693399Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1733142094","title":"squid: Fix of CVE-2024-23638","description":"- CVE-2024-23638: Do not update StoreEntry expiration after errorAppendEntry()","status":"published","published":"2024-12-02T12:21:40Z","modified":"2026-06-01T00:33:22.900783645Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1734542622","title":"squid: Fix of CVE-2024-23638","description":"- CVE-2024-23638: Do not update StoreEntry expiration after errorAppendEntry()","status":"published","published":"2024-12-18T17:23:49Z","modified":"2026-06-01T00:32:57.152134465Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1736860159","title":"squid: Fix of 2 CVEs","description":"- CVE-2024-23638: Fix Denial of Service attack against Cache Manager error responses\n- CVE-2024-37894: Fix Out-of-bounds Write error when assigning ESI variables","status":"published","published":"2025-01-14T13:09:25Z","modified":"2026-06-01T00:30:22.828021778Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"DSA-5637-1","title":"squid - security update","status":"published","published":"2024-03-08T00:00:00Z","modified":"2026-03-09T02:10:03.731725Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0102","title":"Updated squid packages fix security vulnerabilities","description":"Due to an Improper Validation of Specified Index bug, Squid versions\n3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl`\nare vulnerable to a Denial of Service attack against SSL Certificate\nvalidation. This problem allows a remote server to perform Denial of\nService against Squid Proxy by initiating a TLS Handshake with a\nspecially crafted SSL Certificate in a server certificate chain. This\nattack is limited to HTTPS and SSL-Bump. (CVE-2023-46724)\nDue to a Buffer Overread bug Squid is vulnerable to a Denial of Service\nattack against Squid HTTP Message processing. (CVE-2023-49285)\nDue to an Incorrect Check of Function Return Value bug Squid is\nvulnerable to a Denial of Service attack against its Helper process\nmanagement. (CVE-2023-49286)\nDue to an Uncontrolled Recursion bug in versions 2.6 through\n2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5,\nSquid may be vulnerable to a Denial of Service attack against HTTP\nRequest parsing. This problem allows a remote client to perform Denial\nof Service attack by sending a large X-Forwarded-For header when the\nfollow_x_forwarded_for feature is configured. (CVE-2023-50269)\nDue to an expired pointer reference bug, Squid prior to version 6.6 is\nvulnerable to a Denial of Service attack against Cache Manager error\nresponses. This problem allows a trusted client to perform Denial of\nService when generating error pages for Client Manager reports.\n(CVE-2024-23638)\n Starting in version 3.5.27 and prior to version 6.8, Squid may be\nvulnerable to a Denial of Service attack against HTTP Chunked decoder\ndue to an uncontrolled recursion bug. This problem allows a remote\nattacker to cause Denial of Service when sending a crafted, chunked,\nencoded HTTP Message. (CVE-2024-25111)\nDue to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable\nto a Denial of Service attack against HTTP header parsing. This problem\nallows a remote client or a remote server to perform Denial of Service\nwhen sending oversized headers in HTTP messages. In versions of Squid\nprior to 6.5 this can be achieved if the request_header_max_size or\nreply_header_max_size settings are unchanged from the default.\n(CVE-2024-25617)\n","status":"published","published":"2024-03-31T03:27:58Z","modified":"2026-04-16T04:42:22.006828055Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13631-1","title":"squid-6.6-2.1 on GA media","description":"These are all security issues fixed in the squid-6.6-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:14.970905Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2024:4861","title":"Moderate: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638)\n\n* squid: Out-of-bounds write error may lead to Denial of Service (CVE-2024-37894)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-07-26T12:33:59.522203Z","modified":"2026-02-05T04:15:13.494626Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2024:9644","title":"Important: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638)\n\n* squid: Denial of Service processing ESI response content (CVE-2024-45802)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-11-19T16:01:03.545733Z","modified":"2026-02-05T03:45:12.730025Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"ROOT-OS-ALPINE-318-CVE-2024-23638","title":"CVE-2024-23638 in squid - Patched by Root","description":"Root has patched CVE-2024-23638 in the squid package for Root:Alpine:3.18. Multiple fixed versions available.","status":"published","published":"2026-09-29T10:43:34Z","modified":"2026-09-29T11:15:06.187797735Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"SUSE-SU-2024:0296-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654)\n- CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131)\n","status":"published","published":"2024-02-01T10:33:25Z","modified":"2026-02-04T04:38:59.768665Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0298-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654)\n- CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131)\n","status":"published","published":"2024-02-01T12:33:45Z","modified":"2026-02-04T03:43:35.047683Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0455-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654)\n- CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131)\n","status":"published","published":"2024-02-13T09:44:07Z","modified":"2026-02-04T03:18:04.03589Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"USN-6728-1","title":"squid vulnerabilities","description":"Joshua Rogers discovered that Squid incorrectly handled collapsed\nforwarding. A remote attacker could possibly use this issue to cause Squid\nto crash, resulting in a denial of service. This issue only affected Ubuntu\n20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-49288)\n\nJoshua Rogers discovered that Squid incorrectly handled certain structural\nelements. A remote attacker could possibly use this issue to cause Squid to\ncrash, resulting in a denial of service. (CVE-2023-5824)\n\nJoshua Rogers discovered that Squid incorrectly handled Cache Manager error\nresponses. A remote trusted client can possibly use this issue to cause\nSquid to crash, resulting in a denial of service. (CVE-2024-23638)\n\nJoshua Rogers discovered that Squid incorrectly handled the HTTP Chunked\ndecoder. A remote attacker could possibly use this issue to cause Squid to\nstop responding, resulting in a denial of service. (CVE-2024-25111)\n\nJoshua Rogers discovered that Squid incorrectly handled HTTP header\nparsing. A remote trusted client can possibly use this issue to cause\nSquid to crash, resulting in a denial of service. (CVE-2024-25617)\n","status":"published","published":"2024-04-10T16:38:15Z","modified":"2026-04-27T17:17:23.502301109Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}