CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-49288

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with "collapsed_forwarding on" are vulnerable. Configurations with "collapsed_forwarding off" or without a "collapsed_forwarding" directive are not vulnerable. This bug is fixed by Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should remove all collapsed_forwarding lines from their squid.conf.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.017

EPSS Ranking 81.3%

CVSS Severity

CVSS v3 Score 8.6

References

Products affected by CVE-2023-49288

Squid-Cache » Squid » Version: 3.5

cpe:2.3:a:squid-cache:squid:3.5
Squid-Cache » Squid » Version: 3.5.0.1

cpe:2.3:a:squid-cache:squid:3.5.0.1
Squid-Cache » Squid » Version: 3.5.0.2

cpe:2.3:a:squid-cache:squid:3.5.0.2
Squid-Cache » Squid » Version: 3.5.0.3

cpe:2.3:a:squid-cache:squid:3.5.0.3
Squid-Cache » Squid » Version: 3.5.0.4

cpe:2.3:a:squid-cache:squid:3.5.0.4
Squid-Cache » Squid » Version: 3.5.1

cpe:2.3:a:squid-cache:squid:3.5.1
Squid-Cache » Squid » Version: 3.5.10

cpe:2.3:a:squid-cache:squid:3.5.10
Squid-Cache » Squid » Version: 3.5.11

cpe:2.3:a:squid-cache:squid:3.5.11
Squid-Cache » Squid » Version: 3.5.12

cpe:2.3:a:squid-cache:squid:3.5.12
Squid-Cache » Squid » Version: 3.5.13

cpe:2.3:a:squid-cache:squid:3.5.13
Squid-Cache » Squid » Version: 3.5.14

cpe:2.3:a:squid-cache:squid:3.5.14
Squid-Cache » Squid » Version: 3.5.15

cpe:2.3:a:squid-cache:squid:3.5.15
Squid-Cache » Squid » Version: 3.5.16

cpe:2.3:a:squid-cache:squid:3.5.16
Squid-Cache » Squid » Version: 3.5.17

cpe:2.3:a:squid-cache:squid:3.5.17
Squid-Cache » Squid » Version: 3.5.18

cpe:2.3:a:squid-cache:squid:3.5.18
Squid-Cache » Squid » Version: 3.5.19

cpe:2.3:a:squid-cache:squid:3.5.19
Squid-Cache » Squid » Version: 3.5.2

cpe:2.3:a:squid-cache:squid:3.5.2
Squid-Cache » Squid » Version: 3.5.20

cpe:2.3:a:squid-cache:squid:3.5.20
Squid-Cache » Squid » Version: 3.5.21

cpe:2.3:a:squid-cache:squid:3.5.21
Squid-Cache » Squid » Version: 3.5.22

cpe:2.3:a:squid-cache:squid:3.5.22
Squid-Cache » Squid » Version: 3.5.23

cpe:2.3:a:squid-cache:squid:3.5.23
Squid-Cache » Squid » Version: 3.5.24

cpe:2.3:a:squid-cache:squid:3.5.24
Squid-Cache » Squid » Version: 3.5.25

cpe:2.3:a:squid-cache:squid:3.5.25
Squid-Cache » Squid » Version: 3.5.26

cpe:2.3:a:squid-cache:squid:3.5.26
Squid-Cache » Squid » Version: 3.5.27

cpe:2.3:a:squid-cache:squid:3.5.27
Squid-Cache » Squid » Version: 3.5.28

cpe:2.3:a:squid-cache:squid:3.5.28
Squid-Cache » Squid » Version: 3.5.3

cpe:2.3:a:squid-cache:squid:3.5.3
Squid-Cache » Squid » Version: 3.5.4

cpe:2.3:a:squid-cache:squid:3.5.4
Squid-Cache » Squid » Version: 3.5.5

cpe:2.3:a:squid-cache:squid:3.5.5
Squid-Cache » Squid » Version: 3.5.6

cpe:2.3:a:squid-cache:squid:3.5.6
Squid-Cache » Squid » Version: 3.5.7

cpe:2.3:a:squid-cache:squid:3.5.7
Squid-Cache » Squid » Version: 3.5.8

cpe:2.3:a:squid-cache:squid:3.5.8
Squid-Cache » Squid » Version: 3.5.9

cpe:2.3:a:squid-cache:squid:3.5.9
Squid-Cache » Squid » Version: 4.0

cpe:2.3:a:squid-cache:squid:4.0
Squid-Cache » Squid » Version: 4.0.1

cpe:2.3:a:squid-cache:squid:4.0.1
Squid-Cache » Squid » Version: 4.0.10

cpe:2.3:a:squid-cache:squid:4.0.10
Squid-Cache » Squid » Version: 4.0.11

cpe:2.3:a:squid-cache:squid:4.0.11
Squid-Cache » Squid » Version: 4.0.12

cpe:2.3:a:squid-cache:squid:4.0.12
Squid-Cache » Squid » Version: 4.0.13

cpe:2.3:a:squid-cache:squid:4.0.13
Squid-Cache » Squid » Version: 4.0.14

cpe:2.3:a:squid-cache:squid:4.0.14
Squid-Cache » Squid » Version: 4.0.15

cpe:2.3:a:squid-cache:squid:4.0.15
Squid-Cache » Squid » Version: 4.0.16

cpe:2.3:a:squid-cache:squid:4.0.16
Squid-Cache » Squid » Version: 4.0.17

cpe:2.3:a:squid-cache:squid:4.0.17
Squid-Cache » Squid » Version: 4.0.18

cpe:2.3:a:squid-cache:squid:4.0.18
Squid-Cache » Squid » Version: 4.0.19

cpe:2.3:a:squid-cache:squid:4.0.19
Squid-Cache » Squid » Version: 4.0.2

cpe:2.3:a:squid-cache:squid:4.0.2
Squid-Cache » Squid » Version: 4.0.20

cpe:2.3:a:squid-cache:squid:4.0.20
Squid-Cache » Squid » Version: 4.0.21

cpe:2.3:a:squid-cache:squid:4.0.21
Squid-Cache » Squid » Version: 4.0.22

cpe:2.3:a:squid-cache:squid:4.0.22
Squid-Cache » Squid » Version: 4.0.23

cpe:2.3:a:squid-cache:squid:4.0.23
Squid-Cache » Squid » Version: 4.0.24

cpe:2.3:a:squid-cache:squid:4.0.24
Squid-Cache » Squid » Version: 4.0.25

cpe:2.3:a:squid-cache:squid:4.0.25
Squid-Cache » Squid » Version: 4.0.3

cpe:2.3:a:squid-cache:squid:4.0.3
Squid-Cache » Squid » Version: 4.0.4

cpe:2.3:a:squid-cache:squid:4.0.4
Squid-Cache » Squid » Version: 4.0.5

cpe:2.3:a:squid-cache:squid:4.0.5
Squid-Cache » Squid » Version: 4.0.6

cpe:2.3:a:squid-cache:squid:4.0.6
Squid-Cache » Squid » Version: 4.0.8

cpe:2.3:a:squid-cache:squid:4.0.8
Squid-Cache » Squid » Version: 4.0.9

cpe:2.3:a:squid-cache:squid:4.0.9
Squid-Cache » Squid » Version: 4.10

cpe:2.3:a:squid-cache:squid:4.10
Squid-Cache » Squid » Version: 4.11

cpe:2.3:a:squid-cache:squid:4.11
Squid-Cache » Squid » Version: 4.12

cpe:2.3:a:squid-cache:squid:4.12
Squid-Cache » Squid » Version: 4.13

cpe:2.3:a:squid-cache:squid:4.13
Squid-Cache » Squid » Version: 4.14

cpe:2.3:a:squid-cache:squid:4.14
Squid-Cache » Squid » Version: 4.15

cpe:2.3:a:squid-cache:squid:4.15
Squid-Cache » Squid » Version: 4.16

cpe:2.3:a:squid-cache:squid:4.16
Squid-Cache » Squid » Version: 4.17

cpe:2.3:a:squid-cache:squid:4.17
Squid-Cache » Squid » Version: 4.3

cpe:2.3:a:squid-cache:squid:4.3
Squid-Cache » Squid » Version: 4.4

cpe:2.3:a:squid-cache:squid:4.4
Squid-Cache » Squid » Version: 4.6

cpe:2.3:a:squid-cache:squid:4.6
Squid-Cache » Squid » Version: 4.7

cpe:2.3:a:squid-cache:squid:4.7
Squid-Cache » Squid » Version: 4.8

cpe:2.3:a:squid-cache:squid:4.8
Squid-Cache » Squid » Version: 4.9

cpe:2.3:a:squid-cache:squid:4.9
Squid-Cache » Squid » Version: 5.0

cpe:2.3:a:squid-cache:squid:5.0
Squid-Cache » Squid » Version: 5.0.1

cpe:2.3:a:squid-cache:squid:5.0.1
Squid-Cache » Squid » Version: 5.0.2

cpe:2.3:a:squid-cache:squid:5.0.2
Squid-Cache » Squid » Version: 5.0.3

cpe:2.3:a:squid-cache:squid:5.0.3
Squid-Cache » Squid » Version: 5.0.4

cpe:2.3:a:squid-cache:squid:5.0.4
Squid-Cache » Squid » Version: 5.0.5

cpe:2.3:a:squid-cache:squid:5.0.5
Squid-Cache » Squid » Version: 5.0.6

cpe:2.3:a:squid-cache:squid:5.0.6
Squid-Cache » Squid » Version: 5.0.7

cpe:2.3:a:squid-cache:squid:5.0.7
Squid-Cache » Squid » Version: 5.1

cpe:2.3:a:squid-cache:squid:5.1
Squid-Cache » Squid » Version: 5.2

cpe:2.3:a:squid-cache:squid:5.2
Squid-Cache » Squid » Version: 5.3

cpe:2.3:a:squid-cache:squid:5.3
Squid-Cache » Squid » Version: 5.4

cpe:2.3:a:squid-cache:squid:5.4
Squid-Cache » Squid » Version: 5.4.1

cpe:2.3:a:squid-cache:squid:5.4.1
Squid-Cache » Squid » Version: 5.5

cpe:2.3:a:squid-cache:squid:5.5
Squid-Cache » Squid » Version: 5.6

cpe:2.3:a:squid-cache:squid:5.6
Squid-Cache » Squid » Version: 5.7

cpe:2.3:a:squid-cache:squid:5.7
Squid-Cache » Squid » Version: 5.8

cpe:2.3:a:squid-cache:squid:5.8
Squid-Cache » Squid » Version: 5.9

cpe:2.3:a:squid-cache:squid:5.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-49288

Products

Pricing

Contact Us