CVE-2024-45802CWE-20

Squid Denial of Service

High · published October 28, 2024

CVSS v3.1
7.5
EPSS
48%
Percentile
98.9
In the wild
Unconfirmed
What it is

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.47879 · 98.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-10-28T14:36Z
EPSS history
Timeline
  • 28 OCT 14:36Z
    Squid Denial of Service
    cvelistv5