CVE-2023-49286CWE-253CWE-617

Denial of Service in Helper Process management

High · published December 4, 2023

CVSS v3.1
8.6
EPSS
10%
Percentile
95.7
In the wild
Unconfirmed
What it is

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.10352 · 95.7th percentile
Weaknesses
CWE-253 · Incorrect Check of Function Return Value; CWE-617 · Reachable Assertion
Published
2023-12-04T22:53Z
EPSS history
Timeline
  • 04 DEC 22:53Z
    Denial of Service in Helper Process management
    cvelistv5