CVE-2023-49286
Denial of Service in Helper Process management
Summary
Denial of Service in Helper Process management
Original description
The description as published by the source.
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2023-49286 squid Fixed in: 6.5-r0
- Debian DEBIAN-CVE-2023-49286 squid Fixed in: 4.13-10+deb11u3
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- patch github.com
- web squid-cache.org
- web lists.debian.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org