Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-25617

Fixed in a distro release EPSS 88%CVSS 5.3

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of Service when sending oversized headers in HTTP messages. In versions of Squid prior to 6.5 this can be achieved if the request_header_max_size or reply_header_max_size settings are unchanged from the default. In Squid version 6.5 and later, the default setting of these parameters is safe. Squid will emit a critical warning in cache.log if the administrator is setting these parameters to unsafe values. Squid will not at this time prevent these settings from being changed to unsafe values. Users are advised to upgrade to version 6.5. There are no known workarounds for this vulnerability. This issue is also tracked as SQUID-2024:2

Published 2024-02-14 · CVE record · OSV

Products: squid-cache squid

Distro releases

ReleasePackageFixed in
AlmaLinux 8libecap1.0.1-2.module_el8.6.0+3048+383bc947
AlmaLinux 8libecap1.0.1-2.module_el8.6.0+2741+01592ae8
AlmaLinux 8libecap-devel1.0.1-2.module_el8.6.0+2741+01592ae8
AlmaLinux 8libecap-devel1.0.1-2.module_el8.6.0+3048+383bc947
AlmaLinux 8squid7:4.15-7.module_el8.9.0+3749+dbf371ed.10
AlmaLinux 9squid7:5.5-6.el9_3.8
Debian 11squid4.13-10+deb11u3
Debian 12squid5.7-2+deb12u1
Debian 13squid6.5-1
Debian 14squid6.5-1
Red Hat Enterprise Linux 7squid7:3.5.20-17.el7_9.10
Red Hat Enterprise Linux 7squid-debuginfo7:3.5.20-17.el7_9.10
Red Hat Enterprise Linux 7squid-migration-script7:3.5.20-17.el7_9.10
Red Hat Enterprise Linux 7squid-sysvinit7:3.5.20-17.el7_9.10
Red Hat Enterprise Linux 8libecap0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat Enterprise Linux 8libecap-debuginfo0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat Enterprise Linux 8libecap-debugsource0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat Enterprise Linux 8libecap-devel0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat Enterprise Linux 8squid7:4.15-7.module+el8.9.0+21530+59b09a5b.10
Red Hat Enterprise Linux 8squid-debuginfo7:4.15-7.module+el8.9.0+21530+59b09a5b.10
Red Hat Enterprise Linux 8squid-debugsource7:4.15-7.module+el8.9.0+21530+59b09a5b.10
Red Hat Enterprise Linux 9squid7:5.5-6.el9_3.8
Red Hat Enterprise Linux 9squid-debuginfo7:5.5-6.el9_3.8
Red Hat Enterprise Linux 9squid-debugsource7:5.5-6.el9_3.8
Red Hat rhel aus 8.2libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.2libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.2libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.2libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.2squid7:4.4-8.module+el8.2.0+21527+aa63d5ff.9
Red Hat rhel aus 8.2squid-debuginfo7:4.4-8.module+el8.2.0+21527+aa63d5ff.9
Red Hat rhel aus 8.2squid-debugsource7:4.4-8.module+el8.2.0+21527+aa63d5ff.9
Red Hat rhel aus 8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel aus 8.4squid7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat rhel aus 8.4squid-debuginfo7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat rhel aus 8.4squid-debugsource7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat rhel e4s 8.2libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.2libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.2libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.2libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.2squid7:4.4-8.module+el8.2.0+21527+aa63d5ff.9
Red Hat rhel e4s 8.2squid-debuginfo7:4.4-8.module+el8.2.0+21527+aa63d5ff.9
Red Hat rhel e4s 8.2squid-debugsource7:4.4-8.module+el8.2.0+21527+aa63d5ff.9
Red Hat rhel e4s 8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel e4s 8.4squid7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat rhel e4s 8.4squid-debuginfo7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat rhel e4s 8.4squid-debugsource7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat rhel eus 8.6libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.6libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.6libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.6libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.6squid7:4.15-3.module+el8.6.0+21376+425c674a.5
Red Hat rhel eus 8.6squid-debuginfo7:4.15-3.module+el8.6.0+21376+425c674a.5
Red Hat rhel eus 8.6squid-debugsource7:4.15-3.module+el8.6.0+21376+425c674a.5
Red Hat rhel eus 8.8libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.8libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.8libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.8libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel eus 8.8squid7:4.15-6.module+el8.8.0+21374+5b4927f1.4
Red Hat rhel eus 8.8squid-debuginfo7:4.15-6.module+el8.8.0+21374+5b4927f1.4
Red Hat rhel eus 8.8squid-debugsource7:4.15-6.module+el8.8.0+21374+5b4927f1.4
Red Hat rhel eus 9.0squid7:5.2-1.el9_0.6
Red Hat rhel eus 9.0squid-debuginfo7:5.2-1.el9_0.6
Red Hat rhel eus 9.0squid-debugsource7:5.2-1.el9_0.6
Red Hat rhel eus 9.2squid7:5.5-5.el9_2.5
Red Hat rhel eus 9.2squid-debuginfo7:5.5-5.el9_2.5
Red Hat rhel eus 9.2squid-debugsource7:5.5-5.el9_2.5
Red Hat rhel tus 8.2libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.2libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.2libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.2libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.2squid7:4.4-8.module+el8.2.0+21527+aa63d5ff.9
Red Hat rhel tus 8.2squid-debuginfo7:4.4-8.module+el8.2.0+21527+aa63d5ff.9
Red Hat rhel tus 8.2squid-debugsource7:4.4-8.module+el8.2.0+21527+aa63d5ff.9
Red Hat rhel tus 8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat rhel tus 8.4squid7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat rhel tus 8.4squid-debuginfo7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Red Hat rhel tus 8.4squid-debugsource7:4.11-4.module+el8.4.0+21523+3cc98f8b.8
Rocky Linux 8libecap0:1.0.1-2.module+el8.9.0+1437+df5ea8f0
SUSE Enterprise Storage 7.1squid4.17-150000.5.52.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSsquid4.17-150000.5.52.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSsquid4.17-150000.5.52.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSsquid5.7-150400.3.26.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSsquid5.7-150400.3.26.1
SUSE Linux Enterprise Module for Server Applications 15 SP5squid5.7-150400.3.26.1
SUSE Linux Enterprise Server 12 SP5squid4.17-4.44.1
SUSE Linux Enterprise Server 15 SP2-LTSSsquid4.17-150000.5.52.1
SUSE Linux Enterprise Server 15 SP3-LTSSsquid4.17-150000.5.52.1
SUSE Linux Enterprise Server 15 SP4-LTSSsquid5.7-150400.3.26.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5squid4.17-4.44.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2squid4.17-150000.5.52.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3squid4.17-150000.5.52.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4squid5.7-150400.3.26.1
SUSE Manager Proxy 4.3squid5.7-150400.3.26.1
SUSE Manager Server 4.3squid5.7-150400.3.26.1
Ubuntu 20.04 LTSsquid4.10-1ubuntu1.10
Ubuntu 22.04 LTSsquid5.7-0ubuntu0.22.04.4
Ubuntu 24.04 LTSsquid6.5-1ubuntu1
Ubuntu Pro 16.04 LTSsquid33.5.12-1ubuntu7.16+esm3
Ubuntu Pro 18.04 LTSsquid33.5.27-1ubuntu1.14+esm2
openSUSE Leap 15.5squid5.7-150400.3.26.1
openSUSE Tumbleweedsquid6.8-1.1