Non évaluée
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Respo...
CVE-2018-1000027
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2018-1000027 squid Corrigé dans: 3.5.27-r2
- Debian DEBIAN-CVE-2018-1000027 squid Corrigé dans: 4.1-1
Description d'origine La description telle que publiée par la source (souvent en anglais).
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via Remote HTTP server responding with an X-Forwarded-For header to certain types of HTTP request. This vulnerability appears to have been fixed in 4.0.23 and later.
Références
- advisory github.com
- advisory lists.debian.org
- advisory lists.debian.org
- advisory usn.ubuntu.com
- advisory debian.org
- patch squid-cache.org
- patch squid-cache.org
- patch squid-cache.org
- web usn.ubuntu.com