CVE-2024-25111

CVSS 3.1 Score 8.6 of 10 (high)

Details

Published Mar 6, 2024
Updated: Jun 10, 2024
CWE ID 674

Summary

CVE-2024-25111 is a Denial of Service vulnerability affecting Squid web proxy cache versions 3.5.27 and prior to 6.8. This issue arises from an uncontrolled recursion bug in the HTTP Chunked decoder. A remote attacker can exploit this vulnerability by sending a crafted, chunked, encoded HTTP Message, leading to a Denial of Service condition. The affected versions have been patched in Squid 6.8, with patches also available for stable releases. No workaround exists for this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Squid Software

Affected Vendors

  • Squid Software Foundation

Advisories, Assessments, and Mitigations