CVE-2023-5824High· 7.5▾ TwilightA flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the w…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.7 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
3.3%
A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.
squid:4 (all versions)squid:4 (all versions)squid:4 (all versions)squid:4 (all versions)squid:4 (all versions)squid:4 (all versions)squid:4 (all versions)squid:4 (all versions)squid:4 (all versions)squid (all versions)squid (all versions)squid (all versions)squid (all versions)squid (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Disabling the disk caching mechanism will mitigate this vulnerability. To achieve this, remove all the 'cache_dir' directives from the Squid configuration, typically in the /etc/squid/squid.conf file.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-6267High· 8.6Quarkus: json payload getting processed prior to security checks when rest resources are used with annotations.
CVE-2026-16730Medium· 5.5A flaw was found in dbus-broker
CVE-2024-51744Low· 3.1golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (CVE-2024-517…
CVE-2026-45819High· 7.5baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.
CVE-2024-28869High· 7.5traefik: denial of service (CVE-2024-28869)
CVE-2024-12704High· 7.5llama-index: Denial of Service (DoS) in run-llama/llama_index (CVE-2024-12704)