Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-46724

Fixed in a distro release EPSS 4%CVSS 8.6

Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version 6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch archives. Those who you use a prepackaged version of Squid should refer to the package vendor for availability information on updated packages.

Published 2023-11-01 · CVE record · OSV

Products: squid-cache squid

Distro releases

ReleasePackageFixed in
AlmaLinux 8libecap1.0.1-2.module_el8.6.0+2741+01592ae8
AlmaLinux 8libecap1.0.1-2.module_el8.6.0+3048+383bc947
AlmaLinux 8libecap-devel1.0.1-2.module_el8.6.0+2741+01592ae8
AlmaLinux 8libecap-devel1.0.1-2.module_el8.6.0+3048+383bc947
AlmaLinux 8squid7:4.15-7.module_el8.9.0+3708+6acaac63.5
AlmaLinux 9squid7:5.5-6.el9_3.5
Alpine 3.19squid6.4-r0
Alpine 3.20squid6.4-r0
Alpine 3.21squid6.4-r0
Alpine 3.22squid6.4-r0
Alpine 3.23squid6.4-r0
Alpine 3.24squid6.4-r0
Debian 11squid4.13-10+deb11u3
Debian 12squid5.7-2+deb12u1
Debian 13squid6.5-1
Debian 14squid6.5-1
Red Hat Enterprise Linux 7squid7:3.5.20-17.el7_9.10
Red Hat Enterprise Linux 7squid-debuginfo7:3.5.20-17.el7_9.10
Red Hat Enterprise Linux 7squid-migration-script7:3.5.20-17.el7_9.10
Red Hat Enterprise Linux 7squid-sysvinit7:3.5.20-17.el7_9.10
Red Hat Enterprise Linux 8libecap0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat Enterprise Linux 8libecap-debuginfo0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat Enterprise Linux 8libecap-debugsource0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat Enterprise Linux 8libecap-devel0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat Enterprise Linux 8squid7:4.15-7.module+el8.9.0+20975+25f17541.5
Red Hat Enterprise Linux 8squid-debuginfo7:4.15-7.module+el8.9.0+20975+25f17541.5
Red Hat Enterprise Linux 8squid-debugsource7:4.15-7.module+el8.9.0+20975+25f17541.5
Red Hat Enterprise Linux 9squid7:5.5-6.el9_3.5
Red Hat Enterprise Linux 9squid-debuginfo7:5.5-6.el9_3.5
Red Hat Enterprise Linux 9squid-debugsource7:5.5-6.el9_3.5
Red Hat rhel aus 8.2libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.2libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.2libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.2libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.2squid7:4.4-8.module+el8.2.0+21173+22259b09.7
Red Hat rhel aus 8.2squid-debuginfo7:4.4-8.module+el8.2.0+21173+22259b09.7
Red Hat rhel aus 8.2squid-debugsource7:4.4-8.module+el8.2.0+21173+22259b09.7
Red Hat rhel aus 8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.4squid7:4.11-4.module+el8.4.0+21174+3894a031.6
Red Hat rhel aus 8.4squid-debuginfo7:4.11-4.module+el8.4.0+21174+3894a031.6
Red Hat rhel aus 8.4squid-debugsource7:4.11-4.module+el8.4.0+21174+3894a031.6
Red Hat rhel e4s 8.2libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.2libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.2libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.2libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.2squid7:4.4-8.module+el8.2.0+21173+22259b09.7
Red Hat rhel e4s 8.2squid-debuginfo7:4.4-8.module+el8.2.0+21173+22259b09.7
Red Hat rhel e4s 8.2squid-debugsource7:4.4-8.module+el8.2.0+21173+22259b09.7
Red Hat rhel e4s 8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.4squid7:4.11-4.module+el8.4.0+21174+3894a031.6
Red Hat rhel e4s 8.4squid-debuginfo7:4.11-4.module+el8.4.0+21174+3894a031.6
Red Hat rhel e4s 8.4squid-debugsource7:4.11-4.module+el8.4.0+21174+3894a031.6
Red Hat rhel eus 8.6libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.6libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.6libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.6libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.6squid7:4.15-3.module+el8.6.0+21069+a1561e3d.4
Red Hat rhel eus 8.6squid-debuginfo7:4.15-3.module+el8.6.0+21069+a1561e3d.4
Red Hat rhel eus 8.6squid-debugsource7:4.15-3.module+el8.6.0+21069+a1561e3d.4
Red Hat rhel eus 8.8libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.8libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.8libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.8libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.8squid7:4.15-6.module+el8.8.0+21068+0ecbc070.3
Red Hat rhel eus 8.8squid-debuginfo7:4.15-6.module+el8.8.0+21068+0ecbc070.3
Red Hat rhel eus 8.8squid-debugsource7:4.15-6.module+el8.8.0+21068+0ecbc070.3
Red Hat rhel eus 9.0squid7:5.2-1.el9_0.4
Red Hat rhel eus 9.0squid-debuginfo7:5.2-1.el9_0.4
Red Hat rhel eus 9.0squid-debugsource7:5.2-1.el9_0.4
Red Hat rhel eus 9.2squid7:5.5-5.el9_2.3
Red Hat rhel eus 9.2squid-debuginfo7:5.5-5.el9_2.3
Red Hat rhel eus 9.2squid-debugsource7:5.5-5.el9_2.3
Red Hat rhel tus 8.2libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.2libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.2libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.2libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.2squid7:4.4-8.module+el8.2.0+21173+22259b09.7
Red Hat rhel tus 8.2squid-debuginfo7:4.4-8.module+el8.2.0+21173+22259b09.7
Red Hat rhel tus 8.2squid-debugsource7:4.4-8.module+el8.2.0+21173+22259b09.7
Red Hat rhel tus 8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.4squid7:4.11-4.module+el8.4.0+21174+3894a031.6
Red Hat rhel tus 8.4squid-debuginfo7:4.11-4.module+el8.4.0+21174+3894a031.6
Red Hat rhel tus 8.4squid-debugsource7:4.11-4.module+el8.4.0+21174+3894a031.6
Rocky Linux 8libecap0:1.0.1-2.module+el8.9.0+1437+df5ea8f0
Rocky Linux 8squid7:4.15-7.module+el8.9.0+1568+6d4fd5d4.1
SUSE Enterprise Storage 7.1squid4.17-150000.5.38.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSsquid4.17-150000.5.38.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSsquid4.17-150000.5.38.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSsquid4.17-150000.5.38.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSsquid4.17-150000.5.38.1
SUSE Linux Enterprise Module for Server Applications 15 SP4squid5.7-150400.3.12.1
SUSE Linux Enterprise Module for Server Applications 15 SP5squid5.7-150400.3.12.1
SUSE Linux Enterprise Server 12 SP5squid4.17-4.30.1
SUSE Linux Enterprise Server 15 SP1-LTSSsquid4.17-150000.5.38.1
SUSE Linux Enterprise Server 15 SP2-LTSSsquid4.17-150000.5.38.1
SUSE Linux Enterprise Server 15 SP3-LTSSsquid4.17-150000.5.38.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5squid4.17-4.30.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1squid4.17-150000.5.38.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2squid4.17-150000.5.38.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3squid4.17-150000.5.38.1
Ubuntu 20.04 LTSsquid4.10-1ubuntu1.8
Ubuntu 22.04 LTSsquid5.7-0ubuntu0.22.04.2
Ubuntu 24.04 LTSsquid6.1-2ubuntu2
Ubuntu Pro 16.04 LTSsquid3no fix
Ubuntu Pro 18.04 LTSsquid3no fix
openSUSE Leap 15.4squid5.7-150400.3.12.1
openSUSE Leap 15.5squid5.7-150400.3.12.1
openSUSE Tumbleweedsquid6.4-1.1