CVE-2018-1000024
N/A
N/A
Summary
The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling vulnerability in ESI Response Processing that can result in Denial of Service for all clients using the proxy.. This attack appear to be exploitable via Remote server delivers an HTTP response payload containing valid but unusual ESI syntax.. This vulnerability appears to have been fixed in 4.0.23 and later.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://usn.ubuntu.com/3557-1/
- https://www.debian.org/security/2018/dsa-4122
- http://www.squid-cache.org/Versions/
- https://lists.debian.org/debian-lts-announce/2018/02/msg00001.html
- http://www.squid-cache.org/Advisories/SQUID-2018_1.txt
- https://usn.ubuntu.com/4059-2/
References
- https://usn.ubuntu.com/3557-1/
- https://www.debian.org/security/2018/dsa-4122
- http://www.squid-cache.org/Versions/
- https://lists.debian.org/debian-lts-announce/2018/02/msg00001.html
- http://www.squid-cache.org/Advisories/SQUID-2018_1.txt
- https://usn.ubuntu.com/4059-2/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.