Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Mageia 9: MGASA-2024-0265 Moderate: Squid Memory Corruption Alert

mageia
Calendar Grey July 14, 2024
Scroller Mageia
The latest MGASA-2024-0265 patch from Mageia resolves a significant memory corruption vulnerability in squid, marking a critical improvement in security measures.
Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error

Summary

Due to an Out-of-bounds Write error when assigning ESI variables, Squid is susceptible to a Memory Corruption error. This error can lead to a Denial of Service attack. (CVE-2024-37894)

References

- https://bugs.mageia.org/show_bug.cgi?id=33363

- https://lists.suse.com/pipermail/sle-security-updates/2024-July/018842.html

- https://www.cve.org/CVERecord?id=CVE-2024-37894

Topics%20covered

Topics Covered

security advisory security update memory corruption software fix squid Denial of Service Mageia

Resolution

SRPMS

- 9/core/squid-5.9-1.4.mga9

Publication date: 14 Jul 2024
URL: https://advisories.mageia.org/MGASA-2024-0265.html
Type: security
CVE: CVE-2024-37894

Topics%20covered

Topics Covered

security advisory security update memory corruption software fix squid Denial of Service Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.