Read the docs
Red Hat Security Advisory

RHSA-2023:6882

squid34 security update

Released 2023-11-13 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 1 record

Priority HIGH 77

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.78513 Published 2023-11-03 Fixed in 6.4, 7:3.4.14-15.el6_10.1 +13 CWE-120