USN-8998-1: Squid vulnerability
It was discovered that Squid incorrectly handled certain HTTP Transfer- Encoding headers. An attacker could possibly use this issue to perform HTTP request smuggling attacks, bypass security mechanisms, or poison web caches.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/squidto a version that resolves this vulnerability.Fixed in 7.7-0ubuntu0.26.04.2
Event History
Frequently Asked Questions
What attacker access is required to exploit this issue?
The available advisory information does not specify authentication or network-access prerequisites. The issue involves crafted HTTP Transfer-Encoding headers, so exposure depends on whether an attacker can send relevant HTTP requests through the affected Squid deployment.
What could an attacker achieve by exploiting it?
An attacker could potentially perform HTTP request smuggling. The advisory states this may allow bypassing security mechanisms or poisoning web caches.
Are default Squid configurations affected?
The available information does not state whether default configurations are affected. It identifies incorrect handling of certain HTTP Transfer-Encoding headers but provides no configuration-specific conditions.
What mitigation is available if patching cannot happen immediately?
The provided advisory information does not specify a workaround or temporary mitigation. It does indicate that limiting untrusted HTTP requests that reach the affected Squid service would be relevant to the described attack vector.