{"id":"CVE-2024-45802","aliases":["ALSA-2024:9625","ALSA-2024:9644","AZL-51819","CLSA-2024-1732699822","CLSA-2024-1732701268","CLSA-2024-1732701755","CLSA-2024-1732702046","CLSA-2024-1732702216","CLSA-2024-1732702350","CLSA-2024-1732703448","CLSA-2024-1732704094","CLSA-2024-1733141124","CLSA-2025-1761575970","CLSA-2026-1777389615","DEBIAN-CVE-2024-45802","DLA-4083-1","EUVD-2024-41609","GHSA-f975-v7qw-q7hj","OESA-2024-2309","RHSA-2024:9624","RHSA-2024:9625","RHSA-2024:9644","RHSA-2024:9677","RHSA-2024:9678","RHSA-2024:9729","RHSA-2024:9738","RHSA-2024:9813","RHSA-2024:9814","RHSA-2024:9815","RLSA-2024:9625","RLSA-2024:9644","UBUNTU-CVE-2024-45802","openSUSE-SU-2024:14566-1"],"status":"published","title":"Squid Denial of Service","description":"Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.47879,"percentile":0.98862,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2024-10-28T14:36:13Z","modified":"2026-11-02T12:02:49Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"squid","fixed_in":["7:5.5-14.el9_5.3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-cgi","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-common","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-purge","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squid3","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"squidclient","fixed_in":["3.5.27-1ubuntu1.14+tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-cgi","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-common","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-purge","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squid3","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"squidclient","fixed_in":["3.5.12-1ubuntu7.17+tuxcare.els10"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"squid","fixed_in":["7:4.11-4.module_el8.4.0+2234+c2e9b845.2.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"squid","fixed_in":["7:4.15-1.module_el8.5.0+2235+a01b9b37.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"squid34","fixed_in":["7:3.4.14-16.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"squid","fixed_in":["7:3.1.23-30.el6.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"squid34","fixed_in":["7:3.4.14-16.el6.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"squid","fixed_in":["7:3.1.23-30.el6.tuxcare.els13"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"squid","fixed_in":["7:4.15-10.module_el8+2236+26d7e591.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"squid","fixed_in":["4.10-1ubuntu1.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-cgi","fixed_in":["4.10-1ubuntu1.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-common","fixed_in":["4.10-1ubuntu1.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-purge","fixed_in":["4.10-1ubuntu1.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"squidclient","fixed_in":["4.10-1ubuntu1.13+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"squid","fixed_in":["5.7-2+deb12u5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"squid","fixed_in":["6.12-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"squid","fixed_in":["6.12-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"squid","fixed_in":["6.6-4.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"squid","fixed_in":["4.9-27.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"squid","fixed_in":["4.9-27.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"squid","fixed_in":["4.9-23.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"squid","fixed_in":["4.9-27.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid","fixed_in":["7:4.4-8.module+el8.2.0+22482+3b9510d6.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debuginfo","fixed_in":["7:4.4-8.module+el8.2.0+22482+3b9510d6.10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debugsource","fixed_in":["7:4.4-8.module+el8.2.0+22482+3b9510d6.10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid","fixed_in":["7:5.5-14.el9_5.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debuginfo","fixed_in":["7:5.5-14.el9_5.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debugsource","fixed_in":["7:5.5-14.el9_5.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid","fixed_in":["7:5.5-5.el9_2.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid-debuginfo","fixed_in":["7:5.5-5.el9_2.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid-debugsource","fixed_in":["7:5.5-5.el9_2.8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"squid","fixed_in":["7:5.5-13.el9_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"squid-debuginfo","fixed_in":["7:5.5-13.el9_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"squid-debugsource","fixed_in":["7:5.5-13.el9_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"squid","fixed_in":["7:5.2-1.el9_0.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"squid-debuginfo","fixed_in":["7:5.2-1.el9_0.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"squid-debugsource","fixed_in":["7:5.2-1.el9_0.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"squid","fixed_in":["7:3.5.20-17.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"squid-debuginfo","fixed_in":["7:3.5.20-17.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"squid-migration-script","fixed_in":["7:3.5.20-17.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"squid-sysvinit","fixed_in":["7:3.5.20-17.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"squid","fixed_in":["7:4.15-6.module+el8.8.0+22494+5019dde6.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"squid-debuginfo","fixed_in":["7:4.15-6.module+el8.8.0+22494+5019dde6.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"squid-debugsource","fixed_in":["7:4.15-6.module+el8.8.0+22494+5019dde6.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"squid","fixed_in":["7:4.15-3.module+el8.6.0+22491+132fca59.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"squid-debuginfo","fixed_in":["7:4.15-3.module+el8.6.0+22491+132fca59.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"squid-debugsource","fixed_in":["7:4.15-3.module+el8.6.0+22491+132fca59.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"squid","fixed_in":["7:4.15-3.module+el8.6.0+22491+132fca59.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"squid-debuginfo","fixed_in":["7:4.15-3.module+el8.6.0+22491+132fca59.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"squid-debugsource","fixed_in":["7:4.15-3.module+el8.6.0+22491+132fca59.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"squid","fixed_in":["7:4.15-3.module+el8.6.0+22491+132fca59.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"squid-debuginfo","fixed_in":["7:4.15-3.module+el8.6.0+22491+132fca59.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"squid-debugsource","fixed_in":["7:4.15-3.module+el8.6.0+22491+132fca59.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid","fixed_in":["7:4.11-4.module+el8.4.0+22483+0c92772a.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debuginfo","fixed_in":["7:4.11-4.module+el8.4.0+22483+0c92772a.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debugsource","fixed_in":["7:4.11-4.module+el8.4.0+22483+0c92772a.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid","fixed_in":["7:4.11-4.module+el8.4.0+22483+0c92772a.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid-debuginfo","fixed_in":["7:4.11-4.module+el8.4.0+22483+0c92772a.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid-debugsource","fixed_in":["7:4.11-4.module+el8.4.0+22483+0c92772a.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-debuginfo","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-debugsource","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-devel","fixed_in":["0:1.0.1-2.module+el8.1.0+4044+36416a77"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid","fixed_in":["7:4.11-4.module+el8.4.0+22483+0c92772a.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid-debuginfo","fixed_in":["7:4.11-4.module+el8.4.0+22483+0c92772a.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid-debugsource","fixed_in":["7:4.11-4.module+el8.4.0+22483+0c92772a.9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"squid","fixed_in":["7:5.5-14.el9_5.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"squid","fixed_in":["6.12-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-14.el9_5.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+3048+383bc947"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module_el8.10.0+3916+ed00a4a0.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.7-5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els10"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module_el8.4.0+2234+c2e9b845.2.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-1.module_el8.5.0+2235+a01b9b37.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-16.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-16.el6.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.tuxcare.els13"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module_el8+2236+26d7e591.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-cgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squid-purge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"squidclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.7-2+deb12u5"}]}],"versions":["5.7-2","5.7-2+deb12u1","5.7-2+deb12u2","5.7-2+deb12u3","5.7-2+deb12u4"]},{"source":"osv","ecosystem":"Debian:13","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-10+deb11u4"}]}],"versions":["4.13-10","4.13-10+deb11u1","4.13-10+deb11u2","4.13-10+deb11u3"],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6-4.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-27.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-27.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-23.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-27.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+22482+3b9510d6.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+22482+3b9510d6.10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.4-8.module+el8.2.0+22482+3b9510d6.10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-14.el9_5.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-14.el9_5.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-14.el9_5.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+19703+a1da7223"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module+el8.10.0+22489+b920747d.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module+el8.10.0+22489+b920747d.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module+el8.10.0+22489+b920747d.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-5.el9_2.8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-13.el9_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-13.el9_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-13.el9_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.2-1.el9_0.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"squid-migration-script","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"squid-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.5.20-17.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+22494+5019dde6.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+22494+5019dde6.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-6.module+el8.8.0+22494+5019dde6.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+22491+132fca59.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+22491+132fca59.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+22491+132fca59.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+22491+132fca59.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+22491+132fca59.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+22491+132fca59.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+22491+132fca59.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+22491+132fca59.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-3.module+el8.6.0+22491+132fca59.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+22483+0c92772a.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+22483+0c92772a.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+22483+0c92772a.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+22483+0c92772a.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+22483+0c92772a.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+22483+0c92772a.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+22483+0c92772a.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+22483+0c92772a.9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-4.module+el8.4.0+22483+0c92772a.9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:5.5-14.el9_5.3"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.9.0+1437+df5ea8f0"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.15-10.module+el8.10.0+1758+80ba9f4b"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8","3.5.12-1ubuntu7.9","3.5.12-1ubuntu7.10","3.5.12-1ubuntu7.11","3.5.12-1ubuntu7.12","3.5.12-1ubuntu7.13","3.5.12-1ubuntu7.14","3.5.12-1ubuntu7.15","3.5.12-1ubuntu7.16","3.5.12-1ubuntu7.16+esm1","3.5.12-1ubuntu7.16+esm2","3.5.12-1ubuntu7.16+esm3","3.5.12-1ubuntu7.16+esm4","3.5.12-1ubuntu7.16+esm5","3.5.12-1ubuntu7.16+esm6","3.5.12-1ubuntu7.16+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3","3.5.27-1ubuntu1.4","3.5.27-1ubuntu1.5","3.5.27-1ubuntu1.6","3.5.27-1ubuntu1.7","3.5.27-1ubuntu1.8","3.5.27-1ubuntu1.9","3.5.27-1ubuntu1.10","3.5.27-1ubuntu1.11","3.5.27-1ubuntu1.12","3.5.27-1ubuntu1.13","3.5.27-1ubuntu1.14","3.5.27-1ubuntu1.14+esm1","3.5.27-1ubuntu1.14+esm2","3.5.27-1ubuntu1.14+esm3","3.5.27-1ubuntu1.14+esm4","3.5.27-1ubuntu1.14+esm5","3.5.27-1ubuntu1.14+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3","4.9-2ubuntu1","4.9-2ubuntu2","4.9-2ubuntu3","4.9-2ubuntu4","4.10-1ubuntu1","4.10-1ubuntu1.1","4.10-1ubuntu1.2","4.10-1ubuntu1.3","4.10-1ubuntu1.4","4.10-1ubuntu1.5","4.10-1ubuntu1.6","4.10-1ubuntu1.7","4.10-1ubuntu1.8","4.10-1ubuntu1.9","4.10-1ubuntu1.10","4.10-1ubuntu1.11","4.10-1ubuntu1.12","4.10-1ubuntu1.13","4.10-1ubuntu1.13+esm1","4.10-1ubuntu1.13+esm2","4.10-1ubuntu1.13+esm3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.13-10ubuntu5","5.2-1ubuntu1","5.2-1ubuntu3","5.2-1ubuntu4","5.2-1ubuntu4.1","5.2-1ubuntu4.2","5.2-1ubuntu4.3","5.7-0ubuntu0.22.04.1","5.7-0ubuntu0.22.04.2","5.7-0ubuntu0.22.04.3","5.7-0ubuntu0.22.04.4","5.9-0ubuntu0.22.04.1","5.9-0ubuntu0.22.04.2","5.9-0ubuntu0.22.04.3","5.9-0ubuntu0.22.04.4","5.9-0ubuntu0.22.04.5","5.9-0ubuntu0.22.04.7","5.9-0ubuntu0.22.04.8"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1-2ubuntu1","6.1-2ubuntu2","6.5-1ubuntu1","6.5-1ubuntu2","6.5-1ubuntu3","6.6-1ubuntu4","6.6-1ubuntu5","6.6-1ubuntu5.1","6.10-0ubuntu0.24.04.1","6.13-0ubuntu0.24.04.1","6.13-0ubuntu0.24.04.2","6.13-0ubuntu0.24.04.3","6.14-0ubuntu0.24.04.1","6.14-0ubuntu0.24.04.2","6.14-0ubuntu0.24.04.4","6.14-0ubuntu0.24.04.5"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12-1.1"}]}]}],"products":[{"vendor":"squid-cache","product":"squid"}],"references":[{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-f975-v7qw-q7hj","tags":["x_refsource_CONFIRM","Mitigation","Third Party Advisory","advisory","article","report"]},{"url":"https://security.netapp.com/advisory/ntap-20250103-0004/","tags":["advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00009.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9625","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-45802","tags":["report"]},{"url":"https://bugzilla.redhat.com/2322154","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9625.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23638","tags":["report"]},{"url":"https://bugzilla.redhat.com/2260051","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-9644.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45802","tags":["web","advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1732699822.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1732701268.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1732701755.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1732702046.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2024-1732702216.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2024-1732702350.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2024-1732703448.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2024-1732704094.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos8stream-els/CLSA-2024-1733141124.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761575970.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1777389615.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45802.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-45802","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2309","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9624","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2322154","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9624.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-45802","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9625.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2260051","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9644.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23638","tags":["advisory"]},{"url":"http://www.squid-cache.org/Versions/v5/SQUID-2023_11.patch","tags":["article"]},{"url":"http://www.squid-cache.org/Versions/v6/SQUID-2023_11.patch","tags":["article"]},{"url":"https://github.com/squid-cache/squid/commit/290ae202883ac28a48867079c2fb34c40efd382b","tags":["article"]},{"url":"https://github.com/squid-cache/squid/commit/e8118a7381213f5cfcdeb4cec1d2d854bfd261c8","tags":["article"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-j49p-553x-48rx","tags":["article"]},{"url":"https://megamansec.github.io/Squid-Security-Audit/stream-assert.html","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9677","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9677.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9678","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9678.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9729","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9729.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9738","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9738.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9813","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9813.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9814","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9814.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9815","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9815.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9625","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9644","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-45802","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2MQUZAQT5UXLCPYAFDZWWXOJDXWWESAT/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45802","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-45802","title":"Squid Denial of Service","description":"Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.","status":"published","published":"2024-10-28T14:36:13.297Z","modified":"2025-11-03T20:39:12.191Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:34:08.16279Z"}],"euvd":[{"id":"EUVD-2024-41609","description":"Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.","status":"published","published":"2024-10-28T14:36:13Z","modified":"2025-11-03T20:39:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:32.126029Z"}],"nvd":[{"id":"CVE-2024-45802","description":"Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.","status":"published","published":"2024-10-28T15:15:04.857Z","modified":"2026-06-17T07:54:50.823Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:10:34.877798Z"}],"osv":[{"id":"AZL-51819","title":"CVE-2024-45802 affecting package squid 5.7-5","description":"Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.","status":"published","published":"2024-10-28T15:15:04Z","modified":"2026-04-21T04:33:15.776564Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:06.3228Z"},{"id":"CVE-2024-45802","title":"Squid Denial of Service","description":"Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.","status":"published","published":"2024-10-28T14:36:13.297Z","modified":"2026-10-28T02:30:25.05770218Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:44:42.790566Z"},{"id":"DEBIAN-CVE-2024-45802","description":"Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.","status":"published","published":"2024-10-28T15:15:04.857Z","modified":"2026-11-02T12:02:49.629448769Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:43.473331Z"},{"id":"OESA-2024-2309","title":"squid security update","description":"Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests.\r\n\r\nSecurity Fix(es):\r\n\r\nSquid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.(CVE-2024-45802)","status":"published","published":"2024-11-01T11:07:47Z","modified":"2026-08-18T01:17:35.704706037Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"RHSA-2024:9624","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-11-15T20:46:48Z","modified":"2026-10-09T10:12:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2024:9625","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-11-21T21:57:29Z","modified":"2026-10-09T10:12:59Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2024:9644","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-11-15T20:47:10Z","modified":"2026-10-09T10:12:59Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2024:9677","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-11-21T21:56:59Z","modified":"2026-10-09T10:13:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2024:9678","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-11-21T21:57:11Z","modified":"2026-10-09T10:13:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2024:9729","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-11-21T21:56:25Z","modified":"2026-10-09T10:13:01Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2024:9738","title":"Red Hat Security Advisory: squid security update","status":"published","published":"2024-11-21T21:57:45Z","modified":"2026-10-09T10:13:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2024:9813","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-11-25T09:51:24Z","modified":"2026-10-09T10:13:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2024:9814","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-11-25T09:52:22Z","modified":"2026-10-09T10:13:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2024:9815","title":"Red Hat Security Advisory: squid:4 security update","status":"published","published":"2024-11-25T09:52:12Z","modified":"2026-10-09T10:13:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"UBUNTU-CVE-2024-45802","description":"Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.","status":"published","published":"2024-10-28T15:15:00Z","modified":"2026-10-20T22:45:05.12384348Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:02.636559Z"},{"id":"ALSA-2024:9625","title":"Important: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.  \n\nSecurity Fix(es):  \n\n  * squid: Denial of Service processing ESI response content (CVE-2024-45802)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-14T00:00:00Z","modified":"2026-10-29T11:32:11.660677343Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2024:9644","title":"Important: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.  \n\nSecurity Fix(es):  \n\n  * squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638)\n  * squid: Denial of Service processing ESI response content (CVE-2024-45802)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-14T00:00:00Z","modified":"2026-10-29T11:02:22.189676161Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"CLSA-2024-1732699822","title":"Fix CVE(s): CVE-2024-45802","description":"   * SECURITY UPDATE: Fix DoS by a trusted server by disable ESI\n     - CVE-2024-45802","status":"published","published":"2024-11-27T09:30:27Z","modified":"2026-06-04T10:03:51.183573Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1732701268","title":"Fix CVE(s): CVE-2024-45802","description":"   * SECURITY UPDATE: Fix DoS by a trusted server by disable ESI\n     - CVE-2024-45802","status":"published","published":"2024-11-27T09:54:33Z","modified":"2026-06-04T10:04:13.739376Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1732701755","title":"squid: Fix of CVE-2024-45802","description":"- CVE-2024-45802: Disable ESI due to unfixed multiple issues in ESI causing\n  DoS by a trusted server","status":"published","published":"2024-11-27T10:02:44Z","modified":"2026-06-01T00:33:12.570721923Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1732702046","title":"squid: Fix of CVE-2024-45802","description":"- CVE-2024-45802: Fix DoS by a trusted server by disabling ESI","status":"published","published":"2024-11-27T10:07:33Z","modified":"2026-06-01T00:33:22.80698416Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1732702216","title":"squid34: Fix of CVE-2024-45802","description":"- CVE-2024-45802: disable ESI","status":"published","published":"2024-11-27T10:10:22Z","modified":"2026-06-01T00:33:16.259126133Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1732702350","title":"squid: Fix of CVE-2024-45802","description":"- CVE-2024-45802: disable ESI","status":"published","published":"2024-11-27T10:12:36Z","modified":"2026-06-01T00:33:16.250449656Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1732703448","title":"squid34: Fix of CVE-2024-45802","description":"- CVE-2024-45802: disable ESI","status":"published","published":"2024-11-27T10:36:09Z","modified":"2026-06-01T00:33:25.851681167Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1732704094","title":"squid: Fix of CVE-2024-45802","description":"- CVE-2024-45802: disable ESI","status":"published","published":"2024-11-27T10:41:40Z","modified":"2026-06-01T00:33:25.908690788Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1733141124","title":"squid: Fix of CVE-2024-45802","description":"- CVE-2024-45802: Fix DoS by a trusted server by disabling ESI","status":"published","published":"2024-12-02T12:05:31Z","modified":"2026-06-01T00:32:56.860793651Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1761575970","title":"Fix of 6 CVEs","description":"   * SECURITY UPDATE: potential Denial of Service via TLS connection\n     - debian/patches/CVE-2020-14058.patch: Fix sending of unknown validation\n       errors to cert validator\n     - CVE-2020-14058\n   * SECURITY UPDATE: improper Validation of Specified Index leads to Denial of\n     Service via TLS Handshake vulnerability\n     - debian/patches/CVE-2023-46724.patch: Fix validation of certificates with\n       CN=* due to Buffer UnderRead in SSL CN Parsing issue (#1523)\n     - CVE-2023-46724\n   * SECURITY UPDATE: denial of Service vulnerability in HTTP Chunked decoder due\n     to uncontrolled recursion bug\n     - debian/patches/CVE-2024-25111.patch: Fix infinite recursion when parsing\n       HTTP chunks, prevent progress in call chain by stopping HttpStateData\n       recursion\n     - CVE-2024-25111\n   * SECURITY UPDATE: denial of Service vulnerability in the NTLM authentication\n     credentials parser due to incorrect input validation\n     - debian/patches/CVE-2020-8517.patch: Fix incorrect input validation\n       allowing writing outside of buffer and leading to denial of service\n     - CVE-2020-8517\n   * SECURITY UPDATE: denial of Service vulnerability against HTTP header parsing\n     due to a Collapse of Data into Unsafe Value\n     - debian/patches/CVE-2024-25617.patch: Improve handling of expanding HTTP\n       header values to prevent DoS\n     - CVE-2024-25617\n   * SECURITY UPDATE: denial of Service vulnerability by a trusted server\n     - debian/rules: Disable ESI due to unfixed multiple\n       issues in ESI causing DoS by a trusted server\n     - debian/control: Remove dependencies used by ESI\n     - CVE-2024-45802","status":"published","published":"2025-10-27T14:39:39Z","modified":"2026-06-04T10:03:29.096718108Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1777389615","title":"Fix CVE(s): CVE-2024-45802","description":"   * SECURITY UPDATE: multiple vulnerabilities in Edge Side Includes (ESI)\n     processing\n     - debian/rules: build with --disable-esi to remove the vulnerable\n       ESI response processor (matches the upstream Squid 6.10 default,\n       where ESI support is disabled by default).\n     - debian/control: drop libexpat1-dev and libxml2-dev Build-Depends\n       as they are no longer required when ESI is disabled.\n     - CVE-2024-45802","status":"published","published":"2026-04-28T15:20:20Z","modified":"2026-06-04T10:03:52.539455Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-4083-1","title":"squid - security update","status":"published","published":"2025-03-11T00:00:00Z","modified":"2026-03-09T01:23:01.557028Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"openSUSE-SU-2024:14566-1","title":"squid-6.12-1.1 on GA media","description":"These are all security issues fixed in the squid-6.12-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-12-09T00:00:00Z","modified":"2026-02-04T04:22:39.887196Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"RLSA-2024:9625","title":"Important: squid security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: Denial of Service processing ESI response content (CVE-2024-45802)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-03-17T20:16:49.937392Z","modified":"2026-02-04T12:15:08.992226Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2024:9644","title":"Important: squid:4 security update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nSecurity Fix(es):\n\n* squid: vulnerable to a Denial of Service attack against Cache Manager error responses (CVE-2024-23638)\n\n* squid: Denial of Service processing ESI response content (CVE-2024-45802)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-11-19T16:01:03.545733Z","modified":"2026-02-05T03:45:12.730025Z","updated_at":"2026-11-02T15:53:24.923365Z"}]}}