REDHAT-BUG-484246: Medium severity Squid Squid vulnerability

Published Feb 5, 2009

Updated

A denial of service flaw was found in the way squid handles certain client initiated requests. A client who can connect to the squid server could leverage this flaw to cause the squid child process to terminate. This would prevent anyone from using the squid server until the process automatically restarts.

Affected Software

1 affected component

Squid Squid

Event History

Feb 5, 2009

Data Sourced

04:24 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-484246?

The severity of REDHAT-BUG-484246 is classified as a denial of service vulnerability.

How do I fix REDHAT-BUG-484246?

To fix REDHAT-BUG-484246, you should update to the latest version of the Squid software that addresses this vulnerability.

Who is affected by REDHAT-BUG-484246?

Any user of the Squid Web Proxy Cache who allows client connections is potentially affected by REDHAT-BUG-484246.

What symptoms indicate REDHAT-BUG-484246 is being exploited?

If you notice that your Squid child processes are unexpectedly terminating, it may indicate exploitation of REDHAT-BUG-484246.

Is there a workaround for REDHAT-BUG-484246 until a fix is applied?

Currently, there are no recommended workarounds to mitigate the effects of REDHAT-BUG-484246 other than applying the software update.