Aller au contenu
en Se connecter
8.6 Élevée

CVE-2024-25111 Squid is a web proxy cache

Description

Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of Service attack against HTTP Chunked decoder due to an uncontrolled recursion bug. This problem allows a remote attacker to cause Denial of Service when sending a crafted, chunked, encoded HTTP Message. This bug is fixed in Squid version 6.8. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. There is no workaround for this issue.

Produits et versions touchés

Produit Versions touchées Corrigé en
squid 3.5 3.5.27 → < 6.8 6.8
bluexp Versions non publiées
fedora 39 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de squid

Les 19 CVE de squid →
CVE-2026-61642 Squid is a caching proxy for the Web 7.7 Élevée CVE-2026-47729 Squid is a caching proxy for the Web 6.5 Moyenne CVE-2026-50012 Squid is a caching proxy for the Web 5.5 Moyenne CVE-2026-33526 Squid is a caching proxy for the Web 9.2 Critique
Suivre cette CVE