Red Hat Security Advisory

RHSA-2024:0773

squid:4 security update

Released 2024-02-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4, libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +2
Red Hat Enterprise Linux AppStream E4S (v.8.4) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +5
Red Hat Enterprise Linux AppStream TUS (v.8.4) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4, libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +2

Fixes 7 records

TI-2023-26921 CVE-2023-49285

Denial of Service in HTTP Message Processing in Squid

HIGH 79

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.88144 Published 2023-12-04 Partial fix · 6.5 CWE-126

TI-2023-27496 CVE-2023-50269

SQUID-2023:10 Denial of Service in HTTP Request parsing

HIGH 77

Squid is a caching proxy for the Web.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.57627 Published 2023-12-14 Partial fix · 6.6 CWE-674

TI-2025-34351 CVE-2025-54574

Squid's URN Handling can lead to Buffer Overflow

HIGH 68

Squid is a caching proxy for the Web.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22133 Published 2025-08-01 Partial fix · 6.4 CWE-122

TI-2023-26922 CVE-2023-49286

Denial of Service in Helper Process management

MEDIUM 50

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.10352 Published 2023-12-04 Partial fix · 6.5 CWE-253

TI-2023-25207 CVE-2023-46724

SQUID-2023:4 Denial of Service in SSL Certificate validation

MEDIUM 48

Squid is a caching proxy for the Web.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02807 Published 2023-11-01 Partial fix · 6.4 CWE-125

TI-2023-25211 CVE-2023-46728

SQUID-2021:8 Denial of Service in Gopher gateway

MEDIUM 45

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03775 Published 2023-11-06 Partial fix · 6.0.1 CWE-476

TI-2023-05360 CVE-2023-5824

Squid: dos against http and https

LOW 39

A flaw was found in Squid.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03284 Published 2023-11-03 Partial fix · 8090020231130092412.a75119d5, 8020020240122164331.4cda2c84 +6 CWE-755