VYPR
← All advisories
High severity7.5NVD Advisory· Published Nov 3, 2023· Updated Jun 17, 2026

CVE-2023-5824

CVE-2023-5824

Description

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

20
  • Squidex/Squidexllm-fuzzy
  • osv-coords4 versions
    pkg:rpm/almalinux/libecap-develpkg:rpm/opensuse/squid&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/squidpkg:rpm/almalinux/libecap
    < 1.0.1-2.module_el8.6.0+2741+01592ae8+ 3 more
    • (no CPE)range: < 1.0.1-2.module_el8.6.0+2741+01592ae8
    • (no CPE)range: < 6.4-1.1
    • (no CPE)range: < 7:5.5-6.el9_3.2
    • (no CPE)range: < 1.0.1-2.module_el8.6.0+2741+01592ae8
  • Red Hat/Red Hat Enterprise Linux 8.6 Extended Update Supportv5
    cpe:/a:redhat:rhel_eus:8.6::appstream
    Range: 8060020231222131040.ad008a3a
  • Red Hat/Red Hat Enterprise Linux 8.8 Extended Update Supportv5
    cpe:/a:redhat:rhel_eus:8.8::appstream
    Range: 8080020231222130009.63b34585
  • Red Hat/Red Hat Enterprise Linux 9.0 Extended Update Supportv5
    cpe:/a:redhat:rhel_eus:9.0::appstream
    Range: 7:5.2-1.el9_0.4
  • Red Hat/Red Hat Enterprise Linux 9.2 Extended Update Supportv5
    cpe:/a:redhat:rhel_eus:9.2::appstream
    Range: 7:5.5-5.el9_2.3
  • Red Hat/Enterprise Linux Update Services For Sap Solutionscpe-rescue2 versions
    cpe:/a:redhat:rhel_tus:8.2::appstream+ 1 more
    • cpe:/a:redhat:rhel_tus:8.2::appstreamrange: 8020020240122164331.4cda2c84
    • cpe:/a:redhat:rhel_e4s:8.4::appstreamrange: 8040020240122165847.522a0ee4
  • Red Hat/Enterprise Linux Servercpe-rescue8 versions
    cpe:/a:redhat:enterprise_linux:8::appstream+ 7 more
    • cpe:/a:redhat:enterprise_linux:8::appstreamrange: 8090020231130092412.a75119d5
    • cpe:/a:redhat:enterprise_linux:9::appstreamrange: 7:5.5-6.el9_3.2
    • cpe:/o:redhat:enterprise_linux:6
    • cpe:/o:redhat:enterprise_linux:7
    • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
  • Squid Cache/Squid
    cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*
    Range: <6.4

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.