Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Ubuntu 18.04 & 16.04: USN-6857-1 Critical: Squid DoS Issues

ubuntu
Calendar Grey June 27, 2024
Dist Ubuntu Esm H88
Several security updates for Squid in Ubuntu have been released, mitigating risks of denial of service and potential remote intrusions. Discover further details today!
Several security issues were fixed in Squid.

Summary

Several security issues were fixed in Squid.

Software Description:

- squid3: Web proxy cache server

Details:

Joshua Rogers discovered that Squid incorrectly handled requests with the

urn: scheme. A remote attacker could possibly use this issue to cause

Squid to consume resources, leading to a denial of service. This issue

only affected Ubuntu 16.04 LTS. (CVE-2021-28651)

It was discovered that Squid incorrectly handled SSPI and SMB

authentication. A remote attacker could use this issue to cause Squid to

crash, resulting in a denial of service, or possibly obtain sensitive

information. This issue only affected Ubuntu 16.04 LTS. (CVE-2022-41318)

Joshua Rogers discovered that Squid incorrectly handled HTTP message

processing. A remote attacker could possibly use this issue to cause

Squid to crash, resulting in a denial of service. (CVE-2023-49285)

Joshua Rogers discovered that Squid incorrectly handled Helper process

management. A remote attacker could poss...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical squid attack prevention ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
   squid                           3.5.27-1ubuntu1.14+esm2
                                   Available with Ubuntu Pro
   squid3                          3.5.27-1ubuntu1.14+esm2
                                   Available with Ubuntu Pro

Ubuntu 16.04 LTS
   squid                           3.5.12-1ubuntu7.16+esm3
                                   Available with Ubuntu Pro
   squid3                          3.5.12-1ubuntu7.16+esm3
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6857-1

CVE-2021-28651, CVE-2022-41318, CVE-2023-49285, CVE-2023-49286,

CVE-2023-50269, CVE-2024-25617

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6857-1

Topics%20covered

Topics Covered

security advisory denial of service critical squid attack prevention ubuntu

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here