[USN-6728-1] Squid vulnerabilities

  1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6728-1
Severity High
Affected Packages 17
CVEs 5
Info Packages Vulnerabilities

Several security issues were fixed in Squid.

Joshua Rogers discovered that Squid incorrectly handled collapsed
forwarding. A remote attacker could possibly use this issue to cause Squid
to crash, resulting in a denial of service. This issue only affected Ubuntu
20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-49288)

Joshua Rogers discovered that Squid incorrectly handled certain structural
elements. A remote attacker could possibly use this issue to cause Squid to
crash, resulting in a denial of service. (CVE-2023-5824)

Joshua Rogers discovered that Squid incorrectly handled Cache Manager error
responses. A remote trusted client can possibly use this issue to cause
Squid to crash, resulting in a denial of service. (CVE-2024-23638)

Joshua Rogers discovered that Squid incorrectly handled the HTTP Chunked
decoder. A remote attacker could possibly use this issue to cause Squid to
stop responding, resulting in a denial of service. (CVE-2024-25111)

Joshua Rogers discovered that Squid incorrectly handled HTTP header
parsing. A remote trusted client can possibly use this issue to cause
Squid to crash, resulting in a denial of service. (CVE-2024-25617)

Affected

Package Affected Version
pkg:deb/ubuntu/squidclient?distro=mantic < 6.1-2ubuntu1.3
pkg:deb/ubuntu/squidclient?distro=jammy < 5.7-0ubuntu0.22.04.4
pkg:deb/ubuntu/squidclient?distro=focal < 4.10-1ubuntu1.10
pkg:deb/ubuntu/squid?distro=mantic < 6.1-2ubuntu1.3
pkg:deb/ubuntu/squid?distro=jammy < 5.7-0ubuntu0.22.04.4
pkg:deb/ubuntu/squid?distro=focal < 4.10-1ubuntu1.10
pkg:deb/ubuntu/squid-purge?distro=mantic < 6.1-2ubuntu1.3
pkg:deb/ubuntu/squid-purge?distro=jammy < 5.7-0ubuntu0.22.04.4
pkg:deb/ubuntu/squid-purge?distro=focal < 4.10-1ubuntu1.10
pkg:deb/ubuntu/squid-openssl?distro=mantic < 6.1-2ubuntu1.3
pkg:deb/ubuntu/squid-openssl?distro=jammy < 5.7-0ubuntu0.22.04.4
pkg:deb/ubuntu/squid-common?distro=mantic < 6.1-2ubuntu1.3
pkg:deb/ubuntu/squid-common?distro=jammy < 5.7-0ubuntu0.22.04.4
pkg:deb/ubuntu/squid-common?distro=focal < 4.10-1ubuntu1.10
pkg:deb/ubuntu/squid-cgi?distro=mantic < 6.1-2ubuntu1.3
pkg:deb/ubuntu/squid-cgi?distro=jammy < 5.7-0ubuntu0.22.04.4
pkg:deb/ubuntu/squid-cgi?distro=focal < 4.10-1ubuntu1.10
ID
USN-6728-1
Severity
high
Severity from
CVE-2023-49288
URL
https://ubuntu.com/security/notices/USN-6728-1
Published
2024-04-10T16:38:15
(9 months ago)
Modified
2024-04-10T16:38:15
(9 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/squidclient?distro=mantic ubuntu squidclient < 6.1-2ubuntu1.3 mantic
Affected pkg:deb/ubuntu/squidclient?distro=jammy ubuntu squidclient < 5.7-0ubuntu0.22.04.4 jammy
Affected pkg:deb/ubuntu/squidclient?distro=focal ubuntu squidclient < 4.10-1ubuntu1.10 focal
Affected pkg:deb/ubuntu/squid?distro=mantic ubuntu squid < 6.1-2ubuntu1.3 mantic
Affected pkg:deb/ubuntu/squid?distro=jammy ubuntu squid < 5.7-0ubuntu0.22.04.4 jammy
Affected pkg:deb/ubuntu/squid?distro=focal ubuntu squid < 4.10-1ubuntu1.10 focal
Affected pkg:deb/ubuntu/squid-purge?distro=mantic ubuntu squid-purge < 6.1-2ubuntu1.3 mantic
Affected pkg:deb/ubuntu/squid-purge?distro=jammy ubuntu squid-purge < 5.7-0ubuntu0.22.04.4 jammy
Affected pkg:deb/ubuntu/squid-purge?distro=focal ubuntu squid-purge < 4.10-1ubuntu1.10 focal
Affected pkg:deb/ubuntu/squid-openssl?distro=mantic ubuntu squid-openssl < 6.1-2ubuntu1.3 mantic
Affected pkg:deb/ubuntu/squid-openssl?distro=jammy ubuntu squid-openssl < 5.7-0ubuntu0.22.04.4 jammy
Affected pkg:deb/ubuntu/squid-common?distro=mantic ubuntu squid-common < 6.1-2ubuntu1.3 mantic
Affected pkg:deb/ubuntu/squid-common?distro=jammy ubuntu squid-common < 5.7-0ubuntu0.22.04.4 jammy
Affected pkg:deb/ubuntu/squid-common?distro=focal ubuntu squid-common < 4.10-1ubuntu1.10 focal
Affected pkg:deb/ubuntu/squid-cgi?distro=mantic ubuntu squid-cgi < 6.1-2ubuntu1.3 mantic
Affected pkg:deb/ubuntu/squid-cgi?distro=jammy ubuntu squid-cgi < 5.7-0ubuntu0.22.04.4 jammy
Affected pkg:deb/ubuntu/squid-cgi?distro=focal ubuntu squid-cgi < 4.10-1ubuntu1.10 focal
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date