Skip to content
6.3 Medium

CVE-2024-37894 Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more

Description

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.

Affected products and versions

Product Affected versions Fixed in
squid 6.0 6.0 → 6.9 No fix stated
squid 5.0 5.0 → 5.9 No fix stated
squid 4.0 4.0 → 4.16 No fix stated
squid 3.0 3.0 → 3.5.28 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 19 CVEs of squid →
Track this CVE