Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
The product incorrectly checks a return value from a function, which prevents it from detecting errors or exceptional conditions.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Squid | Squid-cache | * | 6.4 (including) |
| Red Hat Enterprise Linux 7 | RedHat | squid-7:3.5.20-17.el7_9.10 | * |
| Red Hat Enterprise Linux 8 | RedHat | squid:4-8090020231207155957.a75119d5 | * |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | RedHat | squid:4-8020020240122164331.4cda2c84 | * |
| Red Hat Enterprise Linux 8.2 Telecommunications Update Service | RedHat | squid:4-8020020240122164331.4cda2c84 | * |
| Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions | RedHat | squid:4-8020020240122164331.4cda2c84 | * |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | RedHat | squid:4-8040020240122165847.522a0ee4 | * |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | RedHat | squid:4-8040020240122165847.522a0ee4 | * |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | RedHat | squid:4-8040020240122165847.522a0ee4 | * |
| Red Hat Enterprise Linux 8.6 Extended Update Support | RedHat | squid:4-8060020231222131040.ad008a3a | * |
| Red Hat Enterprise Linux 8.8 Extended Update Support | RedHat | squid:4-8080020231222130009.63b34585 | * |
| Red Hat Enterprise Linux 9 | RedHat | squid-7:5.5-6.el9_3.5 | * |
| Red Hat Enterprise Linux 9.0 Extended Update Support | RedHat | squid-7:5.2-1.el9_0.4 | * |
| Red Hat Enterprise Linux 9.2 Extended Update Support | RedHat | squid-7:5.5-5.el9_2.3 | * |
| Squid | Ubuntu | bionic | * |
| Squid | Ubuntu | devel | * |
| Squid | Ubuntu | focal | * |
| Squid | Ubuntu | jammy | * |
| Squid | Ubuntu | lunar | * |
| Squid | Ubuntu | mantic | * |
| Squid | Ubuntu | noble | * |
| Squid | Ubuntu | trusty | * |
| Squid | Ubuntu | upstream | * |
| Squid | Ubuntu | xenial | * |
| Squid3 | Ubuntu | bionic | * |
| Squid3 | Ubuntu | esm-infra/bionic | * |
| Squid3 | Ubuntu | esm-infra/xenial | * |
| Squid3 | Ubuntu | trusty | * |
| Squid3 | Ubuntu | xenial | * |