An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a Denial of Service attack (against all clients using the proxy) via HTTP Range request processing.
{ "binaries": [ { "binary_version": "3.5.12-1ubuntu7.16+esm4", "binary_name": "squid" }, { "binary_version": "3.5.12-1ubuntu7.16+esm4", "binary_name": "squid-cgi" }, { "binary_version": "3.5.12-1ubuntu7.16+esm4", "binary_name": "squid-common" }, { "binary_version": "3.5.12-1ubuntu7.16+esm4", "binary_name": "squid-purge" }, { "binary_version": "3.5.12-1ubuntu7.16+esm4", "binary_name": "squid3" }, { "binary_version": "3.5.12-1ubuntu7.16+esm4", "binary_name": "squidclient" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "3.5.27-1ubuntu1.11", "binary_name": "squid" }, { "binary_version": "3.5.27-1ubuntu1.11", "binary_name": "squid-cgi" }, { "binary_version": "3.5.27-1ubuntu1.11", "binary_name": "squid-common" }, { "binary_version": "3.5.27-1ubuntu1.11", "binary_name": "squid-purge" }, { "binary_version": "3.5.27-1ubuntu1.11", "binary_name": "squid3" }, { "binary_version": "3.5.27-1ubuntu1.11", "binary_name": "squidclient" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "4.10-1ubuntu1.4", "binary_name": "squid" }, { "binary_version": "4.10-1ubuntu1.4", "binary_name": "squid-cgi" }, { "binary_version": "4.10-1ubuntu1.4", "binary_name": "squid-common" }, { "binary_version": "4.10-1ubuntu1.4", "binary_name": "squid-purge" }, { "binary_version": "4.10-1ubuntu1.4", "binary_name": "squidclient" } ] }