Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Scientific Linux SL6.x SLSA-2014:0597-1 Moderate: Squid DoS Issue

Calendar Jun 03, 2014 • User Avatar LinuxSecurity Advisories
1 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory denial of service security issue moderate severity squid Scientific Linux
Moderate: squid security update 
Date: Tue, 3 Jun 2014 17:21:41 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: squid on SL6.x i386/x86_64
MIME-Version: 1.0

Synopsis: Moderate: squid security update
Advisory ID: SLSA-2014:0597-1
Issue Date: 2014-06-03
CVE Numbers: CVE-2014-0128
--

A denial of service flaw was found in the way Squid processed certain
HTTPS requests when the SSL Bump feature was enabled. A remote attacker
could send specially crafted requests that could cause Squid to crash.
(CVE-2014-0128)

After installing this update, the squid service will be restarted
automatically.
--

SL6
 x86_64
 squid-3.1.10-20.el6_5.3.x86_64.rpm
 squid-debuginfo-3.1.10-20.el6_5.3.x86_64.rpm
 i386
 squid-3.1.10-20.el6_5.3.i686.rpm
 squid-debuginfo-3.1.10-20.el6_5.3.i686.rpm

- Scientific Linux Development Team