Description

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Remediation

References

CVE-2023-49285

Related Vulnerabilities

WordPress Plugin myghpay WooCommerce Payment Gateway Cross-Site Scripting (3.0)

WordPress Plugin Easiest Contact Form for WordPress-AP Contact Form includes Backdoor [Only if downloaded via the vendor website] (1.0.6)

WordPress Plugin LearnPress-WordPress LMS SQL Injection (3.2.6.7)

WebLogic Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2020-5258)

Apache Tomcat Other Vulnerability (CVE-2003-0042)

Severity

High

Classification

CVE-2023-49285 CWE-125 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities