Red Hat Security AdvisoryRHSA-2022:5529
squid:4 security update
Released 2022-07-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 8.2) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4 +11
Fixes 1 record
Priority LOW 37
In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.05125 · Published 2022-07-17 · Partial fix CWE-617