遠端 CentOS Linux 7 主機上安裝的套件受到 RHSA-2020:1068 公告中提及的多個弱點影響。

  - Squid Software Foundation Squid HTTP Caching Proxy 3.0 至 3.5.27 版和 4.0 至 4.0.22 版的 ESI 回應處理中錯誤指標處理弱點，可導致所有使用 Proxy 的用戶端發生拒絕服務。此攻擊似乎可以透過遠端伺服器利用，傳遞包含有效但異常 ESI 語法的 HTTP 回應承載。此弱點似乎已在 4.0.23 和更新版本中修正。(CVE-2018-1000024)

  - Squid Software Foundation Squid HTTP Caching Proxy 4.0.23 之前版本的 HTTP 回應 X-Forwarded-For 標頭處理中存在 NULL 指標解除參照弱點，可導致 Proxy 的所有用戶端發生拒絕服務。此攻擊似乎可以透過遠端 HTTP 伺服器利用，使用 X-Forwarded-For 標頭回應特定類型的 HTTP 要求。此弱點似乎已在 4.0.23 和更新版本中修正。(CVE-2018-1000027)

  - Squid 4.7 及之前版本的 cachemgr.cgi web 模組中存在透過 user_name 或 auth 參數造成的 XSS 問題。
    (CVE-2019-13345)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

* squid：處理 ESI 回應時的錯誤指標處理可導致拒絕服務 * squid：HTTP 處理和憑證下載中的錯誤指標處理可導致拒絕服務

* squid：透過 user_name 或 cachemgr.cgi 中的驗證參數取得的 XSS

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1068 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data     objects.

    Security Fix(es):

    * squid: Incorrect pointer handling when processing ESI Responses can lead to denial of service     (CVE-2018-1000024)

    * squid: Incorrect pointer handling in HTTP processing and certificate download can lead to denial of     service (CVE-2018-1000027)

    * squid: XSS via user_name or auth parameter in cachemgr.cgi (CVE-2019-13345)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for squid fixes the following issues: Security issues fixed :

  - CVE-2018-1000024: DoS fix caused by incorrect pointer     handling when processing ESI responses. This affects the     default custom esi_parser (bsc#1077003).

  - CVE-2018-1000027: DoS fix caused by incorrect pointer     handing whien processing ESI responses or downloading     intermediate CA certificates (bsc#1077006).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the version of Squid running on the remote host is 3.x prior to 3.5.28, or 4.x prior to 4.0.23. It is, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability exists in the ESI     response processing component due to incorrect pointer handling.
    A remote attacker controlled server can exploit this issue, via a     crafted ESI response, to cause a denial of service for all     clients accessing the Squid service (CVE-2018-1000024)

  - A denial of service (DoS) vulnerability exists in the HTTP     message processing component due to incorrect pointer handling.
    An unauthenticated remote attacker can exploit this issue, via a     crafted HTTP request, to cause a denial of service for all     clients accessing the Squid service (CVE-2018-1000027)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3557-1 advisory.

    Mathias Fischer discovered that Squid incorrectly handled certain long strings in headers. A malicious     remote server could possibly cause Squid to crash, resulting in a denial of service. This issue was only     addressed in Ubuntu 16.04 LTS. (CVE-2016-2569)

    William Lima discovered that Squid incorrectly handled XML parsing when processing Edge Side Includes     (ESI). A malicious remote server could possibly cause Squid to crash, resulting in a denial of service.
    This issue was only addressed in Ubuntu 16.04 LTS. (CVE-2016-2570)

    Alex Rousskov discovered that Squid incorrectly handled response-parsing failures. A malicious remote     server could possibly cause Squid to crash, resulting in a denial of service. This issue only applied to     Ubuntu 16.04 LTS. (CVE-2016-2571)

    Santiago Ruano Rincn discovered that Squid incorrectly handled certain Vary headers. A remote attacker     could possibly use this issue to cause Squid to crash, resulting in a denial of service. This issue was     only addressed in Ubuntu 16.04 LTS. (CVE-2016-3948)

    Louis Dion-Marcil discovered that Squid incorrectly handled certain Edge Side Includes (ESI) responses. A     malicious remote server could possibly cause Squid to crash, resulting in a denial of service.
    (CVE-2018-1000024)

    Louis Dion-Marcil discovered that Squid incorrectly handled certain Edge Side Includes (ESI) responses. A     malicious remote server could possibly cause Squid to crash, resulting in a denial of service.
    (CVE-2018-1000027)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 4.0.23 版本之前的 Squid Software Foundation Squid HTTP Caching Proxy 在 HTTP Response X-Forwarded-For 标头中包含空指针取消引用漏洞，可导致向此代理的所有客户端拒绝服务。通过远程 HTTP 服务器以 X-Forwarded-For 标头响应某些类型的 HTTP 请求，似乎可以利用此攻击。此漏洞似乎已在 4.0.23 或更高版本中修复。(CVE-2018-1000027)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

远程 CentOS Linux 7 主机上安装的程序包受到 RHSA-2020:1068 公告中提及的多个漏洞影响。

  - 版本 3.0 至 3.5.27、4.0 至 4.0.22 的 Squid Software Foundation Squid HTTP Caching Proxy 在 ESI Response Processing 中包含不正确的指针处理漏洞， 可导致使用此代理的所有客户端拒绝服务。此攻击似乎可通过远程服务器交付包含有效但异常的 ESI 语法的 HTTP 响应有效负载加以利用。此漏洞似乎已在 4.0.23 或更高版本中修复。(CVE-2018-1000024)

  - 4.0.23 版本之前的 Squid Software Foundation Squid HTTP Caching Proxy 在 HTTP Response X-Forwarded-For 标头中包含空指针取消引用漏洞，可导致向此代理的所有客户端拒绝服务。通过远程 HTTP 服务器以 X-Forwarded-For 标头响应某些类型的 HTTP 请求，似乎可以利用此攻击。此漏洞似乎已在 4.0.23 或更高版本中修复。(CVE-2018-1000027)

  在 Squid 4.7 及之前的版本中，cachemgr.cgi web 模块中存在通过 user_name 或 auth 参数造成的 XSS 漏洞。
    (CVE-2019-13345)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

* squid：处理 ESI 响应时，错误处理指针可导致拒绝服务 * squid：HTTP 处理和证书下载中的错误指针处理可导致拒绝服务

* squid：通过 user_name 或 cachemgr.cgi 中的身份验证参数获得的 XSS

已发现用于 web 客户端的高性能代理缓存服务器 Squid 容易受到与 ESI 响应处理和中间 CA 证书下载相关的拒绝服务攻击。CVE-2018-1000024 指针处理不正确导致远程服务器能够返回特制的 ESI 响应，从而可能对访问 Squid 服务的所有客户端触发拒绝服务。此问题会影响 Squid 自定义 ESI 解析器。CVE-2018-1000027 指针处理不正确导致远程客户端可能传递某些 HTTP 请求以及某些受信任的服务器响应，包括处理 ESI 响应或下载中间 CA 证书，对访问 squid 服务的所有客户端触发拒绝服务。对于 Debian 7“Wheezy”，这些问题已在 3.1.20-2.2+deb7u8 版本中修复。我们建议您升级 squid3 程序包。注意：Tenable Network Security 已直接从 DLA 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动整理和排版。

ID	名稱	產品	系列	已發布	已更新	嚴重性
135330	CentOS 7：squid (RHSA-2020:1068)	Nessus	CentOS Local Security Checks	2020/4/10	2024/10/9	medium
135837	Scientific Linux 安全性更新：SL7.x x86_64 上的 squid (20200407)	Nessus	Scientific Linux Local Security Checks	2020/4/21	2024/3/15	medium
135061	RHEL 7 : squid (RHSA-2020:1068)	Nessus	Red Hat Local Security Checks	2020/4/1	2024/11/7	medium
107252	SUSE SLES12 Security Update : squid (SUSE-SU-2018:0636-1)	Nessus	SuSE Local Security Checks	2018/3/9	2019/9/10	high
119724	Squid 3.x < 3.5.28 / 4.x < 4.0.23 Multiple Denial of Service Vulnerabilities (SQUID-2018:1) (SQUID-2018:2)	Nessus	Firewalls	2018/12/17	2024/7/15	high
106619	Ubuntu 14.04 LTS / 16.04 LTS : Squid vulnerabilities (USN-3557-1)	Nessus	Ubuntu Local Security Checks	2018/2/6	2024/8/27	high
221724	Linux Distros 未修补的漏洞: CVE-2018-1000027	Nessus	Misc.	2025/3/4	2025/9/14	high
135330	CentOS 7：squid (RHSA-2020:1068)	Nessus	CentOS Local Security Checks	2020/4/10	2024/10/9	medium
135837	Scientific Linux 安全更新：SL7.x x86_64 中的 squid (20200407)	Nessus	Scientific Linux Local Security Checks	2020/4/21	2024/3/15	medium
106589	Debian DLA-1266-1：squid3 安全更新	Nessus	Debian Local Security Checks	2018/2/5	2021/1/11	high

偵測

搜尋 Plugin

medium

medium

medium

high

high

high

high

medium

medium

high