Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Ubuntu 18.04 & 16.04: USN-6857-1 Critical: Squid DoS Issues

ubuntu
Calendar Grey June 27, 2024
Dist Ubuntu Esm H88
Several security updates for Squid in Ubuntu have been released, mitigating risks of denial of service and potential remote intrusions. Discover further details today!
Several security issues were fixed in Squid.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in Squid. Software Description: - squid3: Web proxy cache server Details: Joshua Rogers discovered that Squid incorrectly handled requests with the urn: scheme. A remote attacker could possibly use this issue to cause Squid to consume resources, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2021-28651) It was discovered that Squid incorrectly handled SSPI and SMB authentication. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2022-41318) Joshua Rogers discovered that Squid incorrectly handled HTTP message processing. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE...

Read the Full Advisory

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS squid 3.5.27-1ubuntu1.14+esm2 Available with Ubuntu Pro squid3 3.5.27-1ubuntu1.14+esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS squid 3.5.12-1ubuntu7.16+esm3 Available with Ubuntu Pro squid3 3.5.12-1ubuntu7.16+esm3 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6857-1

CVE-2021-28651, CVE-2022-41318, CVE-2023-49285, CVE-2023-49286,

CVE-2023-50269, CVE-2024-25617

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6857-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here