Use-after-free in Squid - CVE-2023-49288

Vulnerability identifier: #VU83627

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-49288

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error in HTTP collapsed forwarding. A remote attacker can send specially crafted data to the server and crash the proxy server.

Squid
Amazon Linux AMI
Anolis OS
Ubuntu
Fedora
libecap
libecap-devel
squid (Ubuntu package)
squid

Install updates from vendor's website.

Squid - update to 6.0.1
libecap - update to 1.0.1-2.0.1
libecap-devel - update to 1.0.1-2.0.1
squid (Ubuntu package) - addressed in versions 4.10-1ubuntu1.10, 4.10-1ubuntu1.11, 4.10-1ubuntu1.12, 5.7-0ubuntu0.22.04.4, 6.1-2ubuntu1.3
squid - update to 4.15-11
squid - update to 6.6-1
squid - addressed in versions 6.6-1.fc38, 6.6-1.fc39

• https://github.com/squid-cache/squid/security/advisories/GHSA-rj5h-46j6-q2g5

• Multiple vulnerabilities in Squid
• Fedora 38 update for squid
• Fedora 39 update for squid
• Ubuntu update for squid
• Ubuntu update for squid
• Ubuntu update for squid
• Amazon Linux AMI update for squid
• Anolis OS update for squid:4 module