[FEDORA-2023-6317eaa767] Fedora 38: squid

  1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2023-6317eaa767
Severity High
Affected Packages 1
CVEs 6
Info Packages References Vulnerabilities
Source # ID Name URL
Bugzilla 2252924 Bug #2252924 - CVE-2023-49286 squid: Incorrect Check of Function Return Value In Helper Process management [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252924
Bugzilla 2250229 Bug #2250229 - TRIAGE CVE-2023-46728 squid: NULL pointer dereference in the gopher protocol code [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2250229
Bugzilla 2253417 Bug #2253417 - squid-6.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2253417
Bugzilla 2254686 Bug #2254686 - CVE-2023-50269 squid: denial of service in HTTP request parsing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2254686
Bugzilla 2252919 Bug #2252919 - CVE-2023-49288 squid: Use-After-Free in the HTTP Collapsed Forwarding Feature [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252919
Bugzilla 2252927 Bug #2252927 - CVE-2023-49285 squid: Buffer over-read in the HTTP Message processing feature [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2252927
Bugzilla 2250224 Bug #2250224 - CVE-2023-46724 squid: Denial of Service in SSL Certificate validation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2250224
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/squid?distro=fedora-38 fedora squid < 6.6.1.fc38 fedora-38
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date