Home

CVE-2021-33620

Description

Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a header that can be expected to exist in HTTP traffic without any malicious intent by the server.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
7.01

Associated Vulnerability

VulnerabilityOS Platform
Web proxy cache server (USN-4981-1) squid_4.10-1ubuntu1.4_amd64.debLinux
Web proxy cache server (USN-4981-1) squid_4.13-1ubuntu2.2_amd64.debLinux
Web proxy cache server (USN-4981-1) squid_4.13-1ubuntu4.1_amd64.debLinux
Web proxy cache server (USN-4981-1) squid_3.5.27-1ubuntu1.11_i386.debLinux
Web proxy cache server (USN-4981-1) squid_3.5.27-1ubuntu1.11_amd64.debLinux
Squid update (ELSA-2021-9465) squid-3.5.20-17.0.1.el7_9.6.x86_64.rpmLinux
Squid-migration-script update (ELSA-2021-9465) squid-migration-script-3.5.20-17.0.1.el7_9.6.x86_64.rpmLinux
Squid-sysvinit update (ELSA-2021-9465) squid-sysvinit-3.5.20-17.0.1.el7_9.6.x86_64.rpmLinux
SUSE-SU-2022:2367-1(SUSE Linux Enterprise Server 12-SP5 ) squid-4.17-4.24.1.x86_64.rpmLinux
SUSE-SU-2022:2367-1(SUSE Linux Enterprise Server 12-SP5 ) squid-debuginfo-4.17-4.24.1.x86_64.rpmLinux
SUSE-SU-2022:2367-1(SUSE Linux Enterprise Server 12-SP5 ) squid-debugsource-4.17-4.24.1.x86_64.rpmLinux
Squid update (ELSA-2022-5542) squid-3.5.20-17.0.1.el7_9.7.x86_64.rpmLinux
Squid-migration-script update (ELSA-2022-5542) squid-migration-script-3.5.20-17.0.1.el7_9.7.x86_64.rpmLinux
Squid-sysvinit update (ELSA-2022-5542) squid-sysvinit-3.5.20-17.0.1.el7_9.7.x86_64.rpmLinux
Squid update (ELSA-2022-6815) squid-3.5.20-17.0.1.el7_9.8.x86_64.rpmLinux
Squid-migration-script update (ELSA-2022-6815) squid-migration-script-3.5.20-17.0.1.el7_9.8.x86_64.rpmLinux
Squid-sysvinit update (ELSA-2022-6815) squid-sysvinit-3.5.20-17.0.1.el7_9.8.x86_64.rpmLinux
Squid update (ELSA-2023-6805) squid-3.5.20-17.0.1.el7_9.9.x86_64.rpmLinux
Squid-migration-script update (ELSA-2023-6805) squid-migration-script-3.5.20-17.0.1.el7_9.9.x86_64.rpmLinux
Squid update (ELSA-2024-1787) squid-3.5.20-17.0.1.el7_9.10.x86_64.rpmLinux
Squid-migration-script update (ELSA-2024-1787) squid-migration-script-3.5.20-17.0.1.el7_9.10.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234