Priority HIGH 77
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
RHSA-2023:6805
squid security update
Released 2023-11-08 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7) squid-7:3.5.20-17.el7_9.9, squid-migration-script-7:3.5.20-17.el7_9.9
- Red Hat Enterprise Linux Server Optional (v. 7) squid-sysvinit-7:3.5.20-17.el7_9.9
- Red Hat Enterprise Linux Workstation (v. 7) squid-7:3.5.20-17.el7_9.9, squid-migration-script-7:3.5.20-17.el7_9.9
- Red Hat Enterprise Linux Workstation Optional (v. 7) squid-sysvinit-7:3.5.20-17.el7_9.9