This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-46784 →

DEBIAN-CVE-2021-46784

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing lo...

Original description

The description as published by the source.

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 squid

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-1"}]}]

Debian:13 squid

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-1"}]}]

Debian:14 squid

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6-1"}]}]

References

advisory security-tracker.debian.org