CVEvulnerability

CVE-2023-49286

7.5 HIGH Published 2023-12-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-253, CWE-617, CWE-754

Description

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected configurations

• squid-cache squid (<= 6.4)

Related

Weakness · CWE (3)

  • CWE-253 Incorrect Check of Function Return Value weakness
  • CWE-617 Reachable Assertion weakness
  • CWE-754 Improper Check for Unusual or Exceptional Conditions weakness

Referenced by CWE · observed example (3)

  • CWE-253 Incorrect Check of Function Return Value weakness
  • CWE-617 Reachable Assertion weakness
  • CWE-754 Improper Check for Unusual or Exceptional Conditions weakness

References