CVE-2018-1000024: High severity Squid-Cache Squid vulnerability
Due to incorrect pointer handling, Squid versions 3.x (prior to 3.5.27) and 4.x (prior to 4.0.23) are vulnerable to a denial of service attack when processing ESI responses. This problem allows a remote server delivering certain ESI response syntax to trigger a denial of service for all clients accessing the Squid service.
Upstream Advisory: http://www.squid-cache.org/Advisories/SQUID-20181.txt
Upstream Patches: http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-20181.patch http://www.squid-cache.org/Versions/v4/changesets/SQUID-20181.patch
Other sources
The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling vulnerability in ESI Response Processing that can result in Denial of Service for all clients using the proxy.. This attack appear to be exploitable via Remote server delivers an HTTP response payload containing valid but unusual ESI syntax.. This vulnerability appears to have been fixed in 4.0.23 and later.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-1000024?
CVE-2018-1000024 is a vulnerability in the Squid HTTP Caching Proxy that allows for Denial of Service attacks.
How severe is CVE-2018-1000024?
CVE-2018-1000024 has a severity rating of 7.5, indicating a high level of severity.
Which versions of Squid are affected by CVE-2018-1000024?
Squid versions 3.0 to 3.5.27 and 4.0 to 4.0.22 are affected by CVE-2018-1000024.
How can I fix CVE-2018-1000024?
To fix CVE-2018-1000024, update your Squid installation to version 3.5.28 or 4.0.23.
Where can I find more information about CVE-2018-1000024?
You can find more information about CVE-2018-1000024 on the Squid Software Foundation website and the Debian LTS announce mailing list.