Skip to content
fr Sign in
8.6 High

CVE-2024-25111 Squid is a web proxy cache

Description

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunked, encoded HTTP Message. This bug is fixed in Squid version 6.8. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. There is no workaround for this issue.

Affected products and versions

Product Affected versions Fixed in
squid 3.5 3.5.27 → < 6.8 6.8
bluexp Versions not published
fedora 39 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of squid

The 19 CVEs of squid →
CVE-2026-61642 Squid is a caching proxy for the Web 7.7 High CVE-2026-47729 Squid is a caching proxy for the Web 6.5 Medium CVE-2026-50012 Squid is a caching proxy for the Web 5.5 Medium CVE-2026-33526 Squid is a caching proxy for the Web 9.2 Critical
Track this CVE