CVE-2023-49285
Denial of Service in HTTP Message Processing in Squid
概要
Denial of Service in HTTP Message Processing in Squid
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2023-49285 squid 修正版: 6.5-r0
- Debian DEBIAN-CVE-2023-49285 squid 修正版: 4.13-10+deb11u3
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- patch github.com
- patch github.com
- web squid-cache.org
- web squid-cache.org
- web lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org