1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6594-1

[USN-6594-1] Squid vulnerabilities

Severity High
Affected Packages 23
CVEs 3
Info Packages Vulnerabilities

Several security issues were fixed in Squid.

Joshua Rogers discovered that Squid incorrectly handled HTTP message
processing. A remote attacker could possibly use this issue to cause
Squid to crash, resulting in a denial of service. (CVE-2023-49285)

Joshua Rogers discovered that Squid incorrectly handled Helper process
management. A remote attacker could possibly use this issue to cause
Squid to crash, resulting in a denial of service. (CVE-2023-49286)

Joshua Rogers discovered that Squid incorrectly handled HTTP request
parsing. A remote attacker could possibly use this issue to cause
Squid to crash, resulting in a denial of service. (CVE-2023-50269)

Package Affected Version
pkg:deb/ubuntu/squidclient?distro=mantic < 6.1-2ubuntu1.2
pkg:deb/ubuntu/squidclient?distro=lunar < 5.7-1ubuntu3.2
pkg:deb/ubuntu/squidclient?distro=jammy < 5.7-0ubuntu0.22.04.3
pkg:deb/ubuntu/squidclient?distro=focal < 4.10-1ubuntu1.9
pkg:deb/ubuntu/squid?distro=mantic < 6.1-2ubuntu1.2
pkg:deb/ubuntu/squid?distro=lunar < 5.7-1ubuntu3.2
pkg:deb/ubuntu/squid?distro=jammy < 5.7-0ubuntu0.22.04.3
pkg:deb/ubuntu/squid?distro=focal < 4.10-1ubuntu1.9
pkg:deb/ubuntu/squid-purge?distro=mantic < 6.1-2ubuntu1.2
pkg:deb/ubuntu/squid-purge?distro=lunar < 5.7-1ubuntu3.2
pkg:deb/ubuntu/squid-purge?distro=jammy < 5.7-0ubuntu0.22.04.3
pkg:deb/ubuntu/squid-purge?distro=focal < 4.10-1ubuntu1.9
pkg:deb/ubuntu/squid-openssl?distro=mantic < 6.1-2ubuntu1.2
pkg:deb/ubuntu/squid-openssl?distro=lunar < 5.7-1ubuntu3.2
pkg:deb/ubuntu/squid-openssl?distro=jammy < 5.7-0ubuntu0.22.04.3
pkg:deb/ubuntu/squid-common?distro=mantic < 6.1-2ubuntu1.2
pkg:deb/ubuntu/squid-common?distro=lunar < 5.7-1ubuntu3.2
pkg:deb/ubuntu/squid-common?distro=jammy < 5.7-0ubuntu0.22.04.3
pkg:deb/ubuntu/squid-common?distro=focal < 4.10-1ubuntu1.9
pkg:deb/ubuntu/squid-cgi?distro=mantic < 6.1-2ubuntu1.2
pkg:deb/ubuntu/squid-cgi?distro=lunar < 5.7-1ubuntu3.2
pkg:deb/ubuntu/squid-cgi?distro=jammy < 5.7-0ubuntu0.22.04.3
pkg:deb/ubuntu/squid-cgi?distro=focal < 4.10-1ubuntu1.9
ID
USN-6594-1
Severity
high
Severity from
CVE-2023-49285
URL
https://ubuntu.com/security/notices/USN-6594-1
Published
2024-01-23T03:05:16
(7 months ago)
Modified
2024-01-23T03:05:16
(7 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/squidclient?distro=mantic ubuntu squidclient < 6.1-2ubuntu1.2 mantic
Affected pkg:deb/ubuntu/squidclient?distro=lunar ubuntu squidclient < 5.7-1ubuntu3.2 lunar
Affected pkg:deb/ubuntu/squidclient?distro=jammy ubuntu squidclient < 5.7-0ubuntu0.22.04.3 jammy
Affected pkg:deb/ubuntu/squidclient?distro=focal ubuntu squidclient < 4.10-1ubuntu1.9 focal
Affected pkg:deb/ubuntu/squid?distro=mantic ubuntu squid < 6.1-2ubuntu1.2 mantic
Affected pkg:deb/ubuntu/squid?distro=lunar ubuntu squid < 5.7-1ubuntu3.2 lunar
Affected pkg:deb/ubuntu/squid?distro=jammy ubuntu squid < 5.7-0ubuntu0.22.04.3 jammy
Affected pkg:deb/ubuntu/squid?distro=focal ubuntu squid < 4.10-1ubuntu1.9 focal
Affected pkg:deb/ubuntu/squid-purge?distro=mantic ubuntu squid-purge < 6.1-2ubuntu1.2 mantic
Affected pkg:deb/ubuntu/squid-purge?distro=lunar ubuntu squid-purge < 5.7-1ubuntu3.2 lunar
Affected pkg:deb/ubuntu/squid-purge?distro=jammy ubuntu squid-purge < 5.7-0ubuntu0.22.04.3 jammy
Affected pkg:deb/ubuntu/squid-purge?distro=focal ubuntu squid-purge < 4.10-1ubuntu1.9 focal
Affected pkg:deb/ubuntu/squid-openssl?distro=mantic ubuntu squid-openssl < 6.1-2ubuntu1.2 mantic
Affected pkg:deb/ubuntu/squid-openssl?distro=lunar ubuntu squid-openssl < 5.7-1ubuntu3.2 lunar
Affected pkg:deb/ubuntu/squid-openssl?distro=jammy ubuntu squid-openssl < 5.7-0ubuntu0.22.04.3 jammy
Affected pkg:deb/ubuntu/squid-common?distro=mantic ubuntu squid-common < 6.1-2ubuntu1.2 mantic
Affected pkg:deb/ubuntu/squid-common?distro=lunar ubuntu squid-common < 5.7-1ubuntu3.2 lunar
Affected pkg:deb/ubuntu/squid-common?distro=jammy ubuntu squid-common < 5.7-0ubuntu0.22.04.3 jammy
Affected pkg:deb/ubuntu/squid-common?distro=focal ubuntu squid-common < 4.10-1ubuntu1.9 focal
Affected pkg:deb/ubuntu/squid-cgi?distro=mantic ubuntu squid-cgi < 6.1-2ubuntu1.2 mantic
Affected pkg:deb/ubuntu/squid-cgi?distro=lunar ubuntu squid-cgi < 5.7-1ubuntu3.2 lunar
Affected pkg:deb/ubuntu/squid-cgi?distro=jammy ubuntu squid-cgi < 5.7-0ubuntu0.22.04.3 jammy
Affected pkg:deb/ubuntu/squid-cgi?distro=focal ubuntu squid-cgi < 4.10-1ubuntu1.9 focal
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date