Logo
vulnerabilityCVE-2024-45802
Name
CVE-2024-45802
Source
NVD ( link)Debian ( link)
Description
Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
squid
Exploitable

Vulnerability Ratings#


7.5
CVSSv31
7.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
6.14
Not Affected
buildroot
master
7.6
Not Affected
openwrt
master
7.1-r1
Not Affected
openwrt
openwrt-25.12
7.1-r1
Not Affected
yocto
master
7.5
Not Affected
yocto
scarthgap
6.14
Not Affected