Unrated
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Respo...
CVE-2018-1000027
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2018-1000027 squid Fixed in: 3.5.27-r2
- Debian DEBIAN-CVE-2018-1000027 squid Fixed in: 4.1-1
Original description The description as published by the source.
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via Remote HTTP server responding with an X-Forwarded-For header to certain types of HTTP request. This vulnerability appears to have been fixed in 4.0.23 and later.
References
- advisory github.com
- advisory lists.debian.org
- advisory lists.debian.org
- advisory usn.ubuntu.com
- advisory debian.org
- patch squid-cache.org
- patch squid-cache.org
- patch squid-cache.org
- web usn.ubuntu.com