Logo
vulnerabilityCVE-2023-49285
Name
CVE-2023-49285
Source
NVD ( link)Debian ( link)
Description
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack against Squid HTTP Message processing. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
squid
Exploitable

Vulnerability Ratings#


8.6
CVSSv31
7.5
CVSSv31

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
6.14
Not Affected
buildroot
master
7.6
Not Affected
openwrt
master
7.1-r1
Not Affected
openwrt
openwrt-25.12
7.1-r1
Not Affected
yocto
master
7.5
Not Affected
yocto
scarthgap
6.14
Not Affected