CVE catalog

CVE-2024-45802

squid: CVE-2024-45802

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
47.88% · Oct 25, 2026

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During Expected Lifetime, and Missing Release of Resource after Effective Lifetime bugs, Squid is vulnerable to Denial of Service attacks by a trusted server against all clients using the proxy. This bug is fixed in the default build configuration of Squid version 6.10.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansquidsid7.7-1fixed
Debiansquidforky7.7-1fixed
Debiansquidtrixie6.13-2+deb13u3fixed
Debiansquidtrixie-security6.13-2+deb13u2fixed
Debiansquidbookworm5.7-2+deb12u5fixed
Debiansquidbookworm-security5.7-2+deb12u6fixed
Ubuntusquid3pro3.5.23-5ubuntu1vulnerable
Ubuntusquid3pro3.5.23-5ubuntu2vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.1vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.2vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.3vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.4vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.5vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.6vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.7vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.8vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.9vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.10vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.11vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.12vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.13vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.14vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.14+esm1vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.14+esm2vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.14+esm3vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.14+esm4vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.14+esm5vulnerable
Ubuntusquid3pro3.5.27-1ubuntu1.14+esm6vulnerable
Ubuntusquidpro4.8-1ubuntu2vulnerable
Ubuntusquidpro4.8-1ubuntu3vulnerable
Ubuntusquidpro4.9-2ubuntu1vulnerable
Ubuntusquidpro4.9-2ubuntu2vulnerable
Ubuntusquidpro4.9-2ubuntu3vulnerable
Ubuntusquidpro4.9-2ubuntu4vulnerable
Ubuntusquidpro4.10-1ubuntu1vulnerable
Ubuntusquidpro4.10-1ubuntu1.1vulnerable
Ubuntusquidpro4.10-1ubuntu1.2vulnerable
Ubuntusquidpro4.10-1ubuntu1.3vulnerable
Ubuntusquidpro4.10-1ubuntu1.4vulnerable
Ubuntusquidpro4.10-1ubuntu1.5vulnerable
Ubuntusquidpro4.10-1ubuntu1.6vulnerable
Ubuntusquidpro4.10-1ubuntu1.7vulnerable
Ubuntusquidpro4.10-1ubuntu1.8vulnerable
Ubuntusquidpro4.10-1ubuntu1.9vulnerable
Ubuntusquidpro4.10-1ubuntu1.10vulnerable
Ubuntusquidpro4.10-1ubuntu1.11vulnerable
Ubuntusquidpro4.10-1ubuntu1.12vulnerable
Ubuntusquidpro4.10-1ubuntu1.13vulnerable
Ubuntusquidpro4.10-1ubuntu1.13+esm1vulnerable
Ubuntusquidpro4.10-1ubuntu1.13+esm2vulnerable
Ubuntusquidpro4.10-1ubuntu1.13+esm3vulnerable
Ubuntusquid22.044.13-10ubuntu5vulnerable
Ubuntusquid22.045.2-1ubuntu1vulnerable
Ubuntusquid22.045.2-1ubuntu3vulnerable
Ubuntusquid22.045.2-1ubuntu4vulnerable
Ubuntusquid22.045.2-1ubuntu4.1vulnerable
Ubuntusquid22.045.2-1ubuntu4.2vulnerable
Ubuntusquid22.045.2-1ubuntu4.3vulnerable
Ubuntusquid22.045.7-0ubuntu0.22.04.1vulnerable
Ubuntusquid22.045.7-0ubuntu0.22.04.2vulnerable
Ubuntusquid22.045.7-0ubuntu0.22.04.3vulnerable
Ubuntusquid22.045.7-0ubuntu0.22.04.4vulnerable
Ubuntusquid22.045.9-0ubuntu0.22.04.1vulnerable
Ubuntusquid22.045.9-0ubuntu0.22.04.2vulnerable
Ubuntusquid22.045.9-0ubuntu0.22.04.3vulnerable
Ubuntusquid22.045.9-0ubuntu0.22.04.4vulnerable
Ubuntusquid22.045.9-0ubuntu0.22.04.5vulnerable
Ubuntusquid22.045.9-0ubuntu0.22.04.7vulnerable
Ubuntusquid22.045.9-0ubuntu0.22.04.8vulnerable
Ubuntusquid24.046.1-2ubuntu1vulnerable
Ubuntusquid24.046.1-2ubuntu2vulnerable
Ubuntusquid24.046.5-1ubuntu1vulnerable
Ubuntusquid24.046.5-1ubuntu2vulnerable
Ubuntusquid24.046.5-1ubuntu3vulnerable
Ubuntusquid24.046.6-1ubuntu4vulnerable
Ubuntusquid24.046.6-1ubuntu5vulnerable
Ubuntusquid24.046.6-1ubuntu5.1vulnerable
Ubuntusquid24.046.10-0ubuntu0.24.04.1vulnerable
Ubuntusquid24.046.13-0ubuntu0.24.04.1vulnerable
Ubuntusquid24.046.13-0ubuntu0.24.04.2vulnerable
Ubuntusquid24.046.13-0ubuntu0.24.04.3vulnerable
Ubuntusquid24.046.14-0ubuntu0.24.04.1vulnerable
Ubuntusquid24.046.14-0ubuntu0.24.04.2vulnerable
Ubuntusquid24.046.14-0ubuntu0.24.04.4vulnerable
Ubuntusquid24.046.14-0ubuntu0.24.04.5vulnerable
Opensusesquidtumbleweed6.12-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansquidsourcesid6.12-1not yet assignedNot reportedNot reported
Debiansquidsourceforky6.12-1not yet assignedNot reportedNot reported
Debiansquidsourcetrixie6.12-1not yet assignedNot reportedNot reported
Debiansquidsourcebookworm5.7-2+deb12u5not yet assignedNot reportedNot reported
Opensusesquidrpmtumbleweed6.12-1.1Not reportedOPENSUSE-SU-2024:14566-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [squid]Fixed
    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

  • [squid-cgi]Fixed

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

  • [squidclient]Fixed

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

  • [squid-common]Fixed

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · all · bookworm

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u5 · all · bookworm

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · all · bookworm-security

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · all · bookworm-security

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

  • [squid-openssl]Fixed

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

  • [squid-purge]Fixed

    Source package: [squid]

    Details (4)

    • 5.7-2+deb12u5 · amd64 · bookworm

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u5 · arm64 · bookworm

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · amd64 · bookworm-security

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

    • 5.7-2+deb12u6 · arm64 · bookworm-security

      Fixed · Fixed: 5.7-2+deb12u5

      dsa · squid · debian · bookworm; dsa · squid · debian · 12

[Debian 13 (Trixie)]

  • [squid]Fixed
    Details (4)

    • 6.13-2+deb13u2 · amd64 · trixie

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

  • [squid-cgi]Fixed

    Source package: [squid]

    Details (4)

    • 6.13-2+deb13u2 · amd64 · trixie

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

  • [squidclient]Fixed

    Source package: [squid]

    Details (4)

    • 6.13-2+deb13u2 · amd64 · trixie

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

  • [squid-common]Fixed

    Source package: [squid]

    Details (4)

    • 6.13-2+deb13u2 · all · trixie

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · all · trixie

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · all · trixie-security

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · all · trixie-security

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

  • [squid-openssl]Fixed

    Source package: [squid]

    Details (4)

    • 6.13-2+deb13u2 · amd64 · trixie

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

  • [squid-purge]Fixed

    Source package: [squid]

    Details (4)

    • 6.13-2+deb13u2 · amd64 · trixie

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

    • 6.13-2+deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 6.12-1

      dsa · squid · debian · 13

[openSUSE Tumbleweed]

  • [squid]Fixed

    Source package: [squid]

    Details (1)

    • 7.6-1.3 · x86_64 · tumbleweed

      Fixed · Fixed: 6.12-1.1

      dsa · squid · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]