The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6803 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data     objects.

    Security Fix(es):

    * squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)

    * squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6266 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data     objects.

    Security Fix(es):

    * SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)

    * SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

    * SQUID-2023:5 squid: denial of Service in FTP (CVE-2023-46848)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4384-1 advisory.

  - Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions     3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of     Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial     of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a     server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version     6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch     archives. Those who you use a prepackaged version of Squid should refer to the package vendor for     availability information on updated packages. (CVE-2023-46724)

  - SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote     attacker to perform Request/Response smuggling past firewall and frontend security systems.
    (CVE-2023-46846)

  - Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by     writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest     Authentication. (CVE-2023-46847)

  - Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs     in HTTP Request messages or constructing ftp:// URLs from FTP Native input. (CVE-2023-46848)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4381-1 advisory.

  - Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions     3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of     Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial     of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a     server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version     6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch     archives. Those who you use a prepackaged version of Squid should refer to the package vendor for     availability information on updated packages. (CVE-2023-46724)

  - SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote     attacker to perform Request/Response smuggling past firewall and frontend security systems.
    (CVE-2023-46846)

  - Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by     writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest     Authentication. (CVE-2023-46847)

  - Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs     in HTTP Request messages or constructing ftp:// URLs from FTP Native input. (CVE-2023-46848)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-429 advisory.

    2023-12-06: CVE-2023-46728 was added to this advisory.

    Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions     3.3.0.1 through 5.9 and 6.0 prior to 6.4 compiled using `--with-openssl` are vulnerable to a Denial of     Service attack against SSL Certificate validation. This problem allows a remote server to perform Denial     of Service against Squid Proxy by initiating a TLS Handshake with a specially crafted SSL Certificate in a     server certificate chain. This attack is limited to HTTPS and SSL-Bump. This bug is fixed in Squid version     6.4. In addition, patches addressing this problem for the stable releases can be found in Squid's patch     archives. Those who you use a prepackaged version of Squid should refer to the package vendor for     availability information on updated packages. (CVE-2023-46724)

    Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer     dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The     gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this     bug are possible to be received from any gopher server, even those without malicious intent. Gopher     support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade     should reject all gopher URL requests. (CVE-2023-46728)

    Due to chunked decoder lenience Squid is vulnerable to Request/Response smuggling attacks when parsing     HTTP/1.1 and ICAP messages. (CVE-2023-46846)

    This problem allows a remote client to perform Denial of Service when sending ftp:// URLs in HTTP Request     messages or constructing ftp:// URLs from FTP Native input.

    This issue is triggered during access control security checks, meaning clients may not have been permitted     to use the proxy yet.

    FTP support is always enabled and cannot be disabled completely. (CVE-2023-46848)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the squid package has been released.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:11049 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data     objects.

    Security Fix(es):

    * squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0135 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-46846:
    SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote     attacker to perform Request/Response smuggling past firewall and frontend security systems.

    CVE-2023-46847:
    Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by     writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest     Authentication.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6810 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data     objects.

    Security Fix(es):

    * squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)

    * squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7213 advisory.

    libecap     squid     [7:4.15-7.1]
    - Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest       Authentication
    - Resolves: RHEL-14776 - squid: squid: Request/Response smuggling in HTTP/1.1       and ICAP

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of squid installed on the remote host is prior to 3.5.20-17.55. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1933 advisory.

    Due to chunked decoder lenience Squid is vulnerable to Request/Response smuggling attacks when parsing     HTTP/1.1 and ICAP messages. (CVE-2023-46846)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-6266 advisory.

    - Improve HTTP chunked encoding compliance (CVE-2023-46846)
    - Fix stack buffer overflow when parsing Digest Authorization (CVE-2023-46847)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

遠端 Rocky Linux 8 主機已安裝受到多個弱點影響的套件如 RLSA-2023:6267 公告中所提及。

  - SQUID 容易受到區塊解碼器寬鬆所造成的 HTTP 要求走私問題影響，遠端攻擊者可藉此執行要求/回應走私超出防火牆和前端安全性系統。
    (CVE-2023-46846)

  - Squid 容易受到拒絕服務攻擊，當 Squid 設定為接受 HTTP 摘要式驗證時，遠端攻擊者可將最多 2 MB 的任意資料寫入堆積記憶體，以發動緩衝區溢位攻擊。(CVE-2023-46847)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Debian 11/12 主機上安裝的多個套件受到 dsa-5637 公告中提及的多個弱點影響。

  - Squid 是一種用於 Web 的快取代理伺服器。由於指定索引驗證不當錯誤，使用「--with-openssl」編譯的 Squid 3.3.0.1 至 5.9 及 6.0 至 6.4 在進行 SSL 憑證驗證時容易遭受拒絕服務攻擊。此問題允許遠端伺服器透過在伺服器憑證鏈中使用特製 SSL 憑證起始 TLS 交握，對 Squid 代理伺服器造成拒絕服務。此攻擊僅限於 HTTPS 和 SSL-Bump。此錯誤已在 Squid 版本 6.4 中修正。此外，可在 Squid 的修補程式封存中找到可解決此問題的修補程式的穩定版本。使用預先封裝 Squid 版本的使用者應諮詢套件供應商，以取得更新套件的可用性資訊。(CVE-2023-46724)

  - Squid 是一種用於 Web 的快取代理伺服器，支援 HTTP、HTTPS、FTP 等。由於 NULL 指標解除參照錯誤，Squid 的 Gopher 閘道容易遭受拒絕服務攻擊。在 Squid 6.0.1 之前的 Squid 中，gopher 通訊協定一律可用且已啟用。觸發此錯誤的回應可從任何 gopher 伺服器接收，即使是無惡意意圖的伺服器。已在 Squid 版 6.0.1 中移除 Gopher 支援。建議所有使用者進行升級。無法升級的使用者應拒絕所有 gopher URL 要求。(CVE-2023-46728)

  - SQUID 容易受到區塊解碼器寬鬆所造成的 HTTP 要求走私問題影響，遠端攻擊者可藉此執行要求/回應走私超出防火牆和前端安全性系統。
    (CVE-2023-46846)

  - Squid 容易受到拒絕服務攻擊，當 Squid 設定為接受 HTTP 摘要式驗證時，遠端攻擊者可將最多 2 MB 的任意資料寫入堆積記憶體，以發動緩衝區溢位攻擊。(CVE-2023-46847)

  - Squid 容易遭受拒絕服務攻擊，遠端攻擊者可透過在 HTTP 要求訊息中傳送 ftp:// 網址或從 FTP Native 輸入建構 ftp:// 網址來執行 DoS。(CVE-2023-46848)

  - Squid 是一種用於 Web 的快取代理伺服器，支援 HTTP、HTTPS、FTP 等。由於緩衝區過度讀取錯誤，Squid 的 HTTP 訊息處理程序容易遭受拒絕服務攻擊。此錯誤已在 Squid 6.5 版中修正。建議所有使用者進行升級。目前沒有任何因應措施可解決此弱點。
    (CVE-2023-49285)

  - Squid 是一種用於 Web 的快取代理伺服器，支援 HTTP、HTTPS、FTP 等。由於未正確檢查函式傳回值錯誤，Squid 的協助程式流程管理程序容易遭受拒絕服務攻擊。此錯誤已在 Squid 6.5 版中修正。建議所有使用者進行升級。目前沒有任何因應措施可解決此弱點。(CVE-2023-49286)

  - Squid 是一種用於 Web 的快取代理伺服器。由於 2.6 至 2.7.STABLE9 版、3.1 至 5.9 版，以及 6.0.1 至 6.5 版中存在一個不受控制的遞回錯誤，Squid 可能容易遭受 HTTP 要求剖析的拒絕服務攻擊。此問題允許遠端用戶端在設定 follow_x_forwarded_for 功能時，傳送大型 X-Forwarded-For 標頭，藉此發動拒絕服務攻擊。此錯誤已在 Squid 6.6 版中修正。此外，可在 Squid 的修補程式封存中找到可解決此問題的修補程式的穩定版本。(CVE-2023-50269)

  - Squid 是一種用於 Web 的快取代理伺服器。由於存在過期的指標參照錯誤，6.6 之前的 Squid 版本容易遭受 Cache Manager 錯誤回應的拒絕服務攻擊。此問題允許受信任的用戶端在產生 Client Manager 報告的錯誤頁面時執行拒絕服務。比 5.0.5 舊的 Squid 尚未經過測試，應假定為容易遭受攻擊。5.9 版及其之前的所有 Squid-5.x 皆有弱點。6.5 版及其之前的所有 Squid-6.x 皆有弱點。此錯誤已在 Squid 6.6 版中修正。此外，可在 Squid 的修補程式封存中找到可解決此問題的修補程式的穩定版本。因應措施是，使用 Squid 的主要存取控制 `http_access deny manager` 防止存取 Cache Manager。(CVE-2024-23638)

  - Squid 是一種 Web Proxy 快取。自 3.5.27 開始及 6.8 之前的版本中，Squid 可能容易受到針對 HTTP 區塊解碼器的拒絕服務攻擊，這是不受控制的遞回錯誤所導致。遠端攻擊者可藉此問題，在傳送特製的區塊編碼 HTTP 訊息時造成拒絕服務。此錯誤已在 Squid 版本 6.8 中修正。此外，可在 Squid 的修補程式封存中找到可解決此問題的修補程式的穩定版本。目前沒有任何因應措施可解決此問題。
    (CVE-2024-25111)

  - Squid 是一種用於 Web 的開放原始碼快取代理伺服器，支援 HTTP、HTTPS、FTP 等。由於「資料損毀導致不安全的值」錯誤，Squid 可能容易遭受針對 HTTP 標頭剖析的拒絕服務攻擊。當在 HTTP 訊息中傳送過大的標頭時，遠端用戶端或遠端伺服器可藉此問題執行拒絕服務。在 Squid 6.5 之前的版本中，如果預設的 request_header_max_size 或 reply_header_max_size 設定保持改變，攻擊者即可執行此攻擊。在 Squid 6.5 版和更新版本中，這些參數的預設設定十分安全。如果系統管理員將這些參數設定為不安全的值，Squid 便會在 cache.log 中發出重要警告。Squid 目前不會阻止這些設定變更為不安全的值。建議使用者升級至 6.5 版。
    目前沒有任何因應措施可解決此弱點。此問題的追蹤編號為 SQUID-2024:2 (CVE-2024-25617)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Rocky Linux 8 主機已安裝受到多個弱點影響的套件如 RLSA-2023:7213 公告中所提及。

  - SQUID 容易受到區塊解碼器寬鬆所造成的 HTTP 要求走私問題影響，遠端攻擊者可藉此執行要求/回應走私超出防火牆和前端安全性系統。
    (CVE-2023-46846)

  - Squid 容易受到拒絕服務攻擊，當 Squid 設定為接受 HTTP 摘要式驗證時，遠端攻擊者可將最多 2 MB 的任意資料寫入堆積記憶體，以發動緩衝區溢位攻擊。(CVE-2023-46847)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2023: 6267 公告中提及的多個弱點影響。

  - SQUID 容易受到區塊解碼器寬鬆所造成的 HTTP 要求走私問題影響，遠端攻擊者可藉此執行要求/回應走私超出防火牆和前端安全性系統。
    (CVE-2023-46846)

  - Squid 容易受到拒絕服務攻擊，當 Squid 設定為接受 HTTP 摘要式驗證時，遠端攻擊者可將最多 2 MB 的任意資料寫入堆積記憶體，以發動緩衝區溢位攻擊。(CVE-2023-46847)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Oracle Linux 8 主機中安裝的套件受到 ELSA-2023-6267 公告中提及的多個弱點影響。

  - Squid 容易受到拒絕服務攻擊，當 Squid 設定為接受 HTTP 摘要式驗證時，遠端攻擊者可將最多 2 MB 的任意資料寫入堆積記憶體，以發動緩衝區溢位攻擊。(CVE-2023-46847)

  - SQUID 容易受到區塊解碼器寬鬆所造成的 HTTP 要求走私問題影響，遠端攻擊者可藉此執行要求/回應走私超出防火牆和前端安全性系統。
    (CVE-2023-46846)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	名稱	產品	系列	已發布	已更新	嚴重性
185355	RHEL 8 : squid:4 (RHSA-2023:6803)	Nessus	Red Hat Local Security Checks	2023/11/8	2024/11/7	medium
184205	RHEL 9 : squid (RHSA-2023:6266)	Nessus	Red Hat Local Security Checks	2023/11/2	2025/3/6	medium
185421	SUSE SLES15 Security Update : squid (SUSE-SU-2023:4384-1)	Nessus	SuSE Local Security Checks	2023/11/9	2023/12/15	medium
184796	SUSE SLES12 Security Update : squid (SUSE-SU-2023:4381-1)	Nessus	SuSE Local Security Checks	2023/11/7	2023/12/15	medium
185721	Amazon Linux 2023 : squid (ALAS2023-2023-429)	Nessus	Amazon Linux Local Security Checks	2023/11/15	2024/12/11	medium
204805	Photon OS 3.0: Squid PHSA-2023-3.0-0697	Nessus	PhotonOS Local Security Checks	2024/7/27	2024/7/27	medium
213093	RHEL 7 : squid (RHSA-2024:11049)	Nessus	Red Hat Local Security Checks	2024/12/17	2024/12/17	medium
236673	Alibaba Cloud Linux 3 : 0135: squid:4 (ALINUX3-SA-2023:0135)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	medium
185360	RHEL 8 : squid:4 (RHSA-2023:6810)	Nessus	Red Hat Local Security Checks	2023/11/8	2024/11/7	medium
186200	Oracle Linux 8 : squid:4 (ELSA-2023-7213)	Nessus	Oracle Linux Local Security Checks	2023/11/22	2025/9/9	medium
194725	Amazon Linux AMI : squid (ALAS-2024-1933)	Nessus	Amazon Linux Local Security Checks	2024/4/29	2024/12/11	medium
184382	Oracle Linux 9 : squid (ELSA-2023-6266)	Nessus	Oracle Linux Local Security Checks	2023/11/3	2025/9/9	medium
204419	Photon OS 5.0: Squid PHSA-2023-5.0-0154	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	medium
185470	Rocky Linux 8squid:4 (RLSA-2023:6267)	Nessus	Rocky Linux Local Security Checks	2023/11/11	2023/12/15	medium
191759	Debian dsa-5637：squid - 安全性更新	Nessus	Debian Local Security Checks	2024/3/8	2025/1/24	medium
186404	Rocky Linux 8squid:4 (RLSA-2023:7213)	Nessus	Rocky Linux Local Security Checks	2023/11/28	2023/12/20	medium
184207	RHEL 8：squid：4 (RHSA-2023: 6267)	Nessus	Red Hat Local Security Checks	2023/11/2	2025/3/6	medium
185368	Oracle Linux 8：squid：4 (ELSA-2023-6267)	Nessus	Oracle Linux Local Security Checks	2023/11/8	2025/9/9	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium