Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-45802

Fixed in a distro release EPSS 48%CVSS 7.5

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Published 2024-10-28 · CVE record · OSV

Products: squid-cache squid

Distro releases

ReleasePackageFixed in
AlmaLinux:8libecap1.0.1-2.module_el8.6.0+2741+01592ae8
AlmaLinux:8libecap1.0.1-2.module_el8.6.0+3048+383bc947
AlmaLinux:8libecap-devel1.0.1-2.module_el8.6.0+2741+01592ae8
AlmaLinux:8libecap-devel1.0.1-2.module_el8.6.0+3048+383bc947
AlmaLinux:8squid7:4.15-10.module_el8.10.0+3916+ed00a4a0.3
AlmaLinux:9squid7:5.5-14.el9_5.3
Debian:11squid4.13-10+deb11u4
Debian:12squid5.7-2+deb12u5
Debian:13squid6.12-1
Debian:14squid6.12-1
Red Hat:enterprise_linux:8libecap0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat:enterprise_linux:8libecap-debuginfo0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat:enterprise_linux:8libecap-debugsource0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat:enterprise_linux:8libecap-devel0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat:enterprise_linux:8squid7:4.15-10.module+el8.10.0+22489+b920747d.3
Red Hat:enterprise_linux:8squid-debuginfo7:4.15-10.module+el8.10.0+22489+b920747d.3
Red Hat:enterprise_linux:8squid-debugsource7:4.15-10.module+el8.10.0+22489+b920747d.3
Red Hat:enterprise_linux:9squid7:5.5-14.el9_5.3
Red Hat:enterprise_linux:9squid-debuginfo7:5.5-14.el9_5.3
Red Hat:enterprise_linux:9squid-debugsource7:5.5-14.el9_5.3
Red Hat:rhel_aus:8.2libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.2libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.2libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.2libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.2squid7:4.4-8.module+el8.2.0+22482+3b9510d6.10
Red Hat:rhel_aus:8.2squid-debuginfo7:4.4-8.module+el8.2.0+22482+3b9510d6.10
Red Hat:rhel_aus:8.2squid-debugsource7:4.4-8.module+el8.2.0+22482+3b9510d6.10
Red Hat:rhel_aus:8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.4squid7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat:rhel_aus:8.4squid-debuginfo7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat:rhel_aus:8.4squid-debugsource7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat:rhel_aus:8.6libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.6libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.6libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.6libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.6squid7:4.15-3.module+el8.6.0+22491+132fca59.7
Red Hat:rhel_aus:8.6squid-debuginfo7:4.15-3.module+el8.6.0+22491+132fca59.7
Red Hat:rhel_aus:8.6squid-debugsource7:4.15-3.module+el8.6.0+22491+132fca59.7
Red Hat:rhel_e4s:8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.4squid7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat:rhel_e4s:8.4squid-debuginfo7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat:rhel_e4s:8.4squid-debugsource7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat:rhel_e4s:8.6libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.6libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.6libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.6libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.6squid7:4.15-3.module+el8.6.0+22491+132fca59.7
Red Hat:rhel_e4s:8.6squid-debuginfo7:4.15-3.module+el8.6.0+22491+132fca59.7
Red Hat:rhel_e4s:8.6squid-debugsource7:4.15-3.module+el8.6.0+22491+132fca59.7
Red Hat:rhel_e4s:9.0squid7:5.2-1.el9_0.7
Red Hat:rhel_e4s:9.0squid-debuginfo7:5.2-1.el9_0.7
Red Hat:rhel_e4s:9.0squid-debugsource7:5.2-1.el9_0.7
Red Hat:rhel_els:7squid7:3.5.20-17.el7_9.11
Red Hat:rhel_els:7squid-debuginfo7:3.5.20-17.el7_9.11
Red Hat:rhel_els:7squid-migration-script7:3.5.20-17.el7_9.11
Red Hat:rhel_els:7squid-sysvinit7:3.5.20-17.el7_9.11
Red Hat:rhel_eus:8.8libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_eus:8.8libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_eus:8.8libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_eus:8.8libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_eus:8.8squid7:4.15-6.module+el8.8.0+22494+5019dde6.7
Red Hat:rhel_eus:8.8squid-debuginfo7:4.15-6.module+el8.8.0+22494+5019dde6.7
Red Hat:rhel_eus:8.8squid-debugsource7:4.15-6.module+el8.8.0+22494+5019dde6.7
Red Hat:rhel_eus:9.2squid7:5.5-5.el9_2.8
Red Hat:rhel_eus:9.2squid-debuginfo7:5.5-5.el9_2.8
Red Hat:rhel_eus:9.2squid-debugsource7:5.5-5.el9_2.8
Red Hat:rhel_eus:9.4squid7:5.5-13.el9_4.2
Red Hat:rhel_eus:9.4squid-debuginfo7:5.5-13.el9_4.2
Red Hat:rhel_eus:9.4squid-debugsource7:5.5-13.el9_4.2
Red Hat:rhel_tus:8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.4squid7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat:rhel_tus:8.4squid-debuginfo7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat:rhel_tus:8.4squid-debugsource7:4.11-4.module+el8.4.0+22483+0c92772a.9
Red Hat:rhel_tus:8.6libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.6libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.6libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.6libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.6squid7:4.15-3.module+el8.6.0+22491+132fca59.7
Red Hat:rhel_tus:8.6squid-debuginfo7:4.15-3.module+el8.6.0+22491+132fca59.7
Red Hat:rhel_tus:8.6squid-debugsource7:4.15-3.module+el8.6.0+22491+132fca59.7
Rocky Linux:8libecap0:1.0.1-2.module+el8.9.0+1437+df5ea8f0
Rocky Linux:8squid7:4.15-10.module+el8.10.0+1758+80ba9f4b
Rocky Linux:9squid7:5.5-14.el9_5.3
Ubuntu:22.04:LTSsquidno fix
Ubuntu:24.04:LTSsquidno fix
Ubuntu:Pro:16.04:LTSsquid3no fix
Ubuntu:Pro:18.04:LTSsquid3no fix
Ubuntu:Pro:20.04:LTSsquidno fix
openSUSE:Tumbleweedsquid6.12-1.1