PT-2018-9215
CVE-2018-1000024
·
تاريخ النشر
2018-01-29
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Squid HTTP Caching Proxy versions 3.0 through 3.5.27
Squid HTTP Caching Proxy versions 4.0 through 4.0.22
Description:
The issue is related to Incorrect Pointer Handling in ESI Response Processing, which can cause Denial of Service for all clients using the proxy. This can be exploited when a remote server delivers an HTTP response payload containing valid but unusual ESI syntax.
Recommendations:
For Squid HTTP Caching Proxy versions 3.0 through 3.5.27, update to version 4.0.23 or later.
For Squid HTTP Caching Proxy versions 4.0 through 4.0.22, update to version 4.0.23 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾