Vulnerability · Redhat Enterprise Linux
CVE-2023-5824
A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.
CVSS score (v3.1)7.5High
Fixed in 6.4
Not on CISA KEV list
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Show me how to fix itTimeline
- Published by NVD
- Last updated by NVD
Affected products
| Product | Versions |
|---|---|
| Redhat Enterprise Linux | 6.0 only; 7.0 only; 8.0 only; 9.0 only |
| Squid-Cache Squid | up to before 6.4 |
Sources: NVD and CISA known exploited vulnerabilities catalogue.