CVE-2024-37894CWE-787

Squid vulnerable to heap corruption in ESI assign

Medium · published June 25, 2024

CVSS v3.1
6.3
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.06255 · 93.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-06-25T19:39Z
EPSS history
Timeline
  • 25 JUN 19:39Z
    Squid vulnerable to heap corruption in ESI assign
    cvelistv5