First published: Tue Jul 23 2024(Updated: )
Joshua Rogers discovered that Squid did not properly handle multi-byte characters during Edge Side Includes (ESI) processing. A remote attacker could possibly use this issue to cause a memory corruption error, leading to a denial of service.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/squid | <6.6-1ubuntu5.1 | 6.6-1ubuntu5.1 |
Ubuntu Ubuntu | =24.04 | |
All of | ||
ubuntu/squid | <5.9-0ubuntu0.22.04.2 | 5.9-0ubuntu0.22.04.2 |
Ubuntu Ubuntu | =22.04 | |
All of | ||
ubuntu/squid | <4.10-1ubuntu1.13 | 4.10-1ubuntu1.13 |
Ubuntu Ubuntu | =20.04 | |
All of | ||
ubuntu/squid | <3.5.27-1ubuntu1.14+esm3 | 3.5.27-1ubuntu1.14+esm3 |
Ubuntu Ubuntu | =18.04 | |
All of | ||
ubuntu/squid3 | <3.5.27-1ubuntu1.14+esm3 | 3.5.27-1ubuntu1.14+esm3 |
Ubuntu Ubuntu | =18.04 | |
All of | ||
ubuntu/squid | <3.5.12-1ubuntu7.16+esm4 | 3.5.12-1ubuntu7.16+esm4 |
Ubuntu Ubuntu | =16.04 | |
All of | ||
ubuntu/squid3 | <3.5.12-1ubuntu7.16+esm4 | 3.5.12-1ubuntu7.16+esm4 |
Ubuntu Ubuntu | =16.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.