Red Hat Security Advisory

RHSA-2024:0072

squid security update

Released 2024-01-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.2) squid-7:5.5-5.el9_2.3

Fixes 6 records

TI-2023-26921 CVE-2023-49285

Denial of Service in HTTP Message Processing in Squid

HIGH 79

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.88144 Published 2023-12-04 Partial fix · 6.5 CWE-126

TI-2025-34351 CVE-2025-54574

Squid's URN Handling can lead to Buffer Overflow

HIGH 68

Squid is a caching proxy for the Web.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22133 Published 2025-08-01 Partial fix · 6.4 CWE-122

TI-2023-26922 CVE-2023-49286

Denial of Service in Helper Process management

MEDIUM 50

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.10352 Published 2023-12-04 Partial fix · 6.5 CWE-253

TI-2023-25207 CVE-2023-46724

SQUID-2023:4 Denial of Service in SSL Certificate validation

MEDIUM 48

Squid is a caching proxy for the Web.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02807 Published 2023-11-01 Partial fix · 6.4 CWE-125

TI-2023-25211 CVE-2023-46728

SQUID-2021:8 Denial of Service in Gopher gateway

MEDIUM 45

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03775 Published 2023-11-06 Partial fix · 6.0.1 CWE-476

TI-2023-05360 CVE-2023-5824

Squid: dos against http and https

LOW 39

A flaw was found in Squid.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03284 Published 2023-11-03 Partial fix · 8090020231130092412.a75119d5, 8020020240122164331.4cda2c84 +6 CWE-755