未評価
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Respo...
CVE-2018-1000027
SecPulse初出
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2018-1000027 squid 修正版: 3.5.27-r2
- Debian DEBIAN-CVE-2018-1000027 squid 修正版: 4.1-1
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via Remote HTTP server responding with an X-Forwarded-For header to certain types of HTTP request. This vulnerability appears to have been fixed in 4.0.23 and later.
参照URL
- advisory github.com
- advisory lists.debian.org
- advisory lists.debian.org
- advisory usn.ubuntu.com
- advisory debian.org
- patch squid-cache.org
- patch squid-cache.org
- patch squid-cache.org
- web usn.ubuntu.com