CVE-2023-49286: high-severity vulnerability in squid-cache squid
Denial of Service in Helper Process management
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Squid proxy has a bug where it doesn't properly check if helper processes are working correctly, allowing attackers to crash the helper management system and make the proxy stop serving requests.
An incorrect validation of function return values in Squid's helper process management allows remote attackers to trigger a denial of service condition by exploiting the failure to properly handle error states, resulting in service disruption. Affected versions prior to 6.5; no authentication or special privileges required for exploitation.
In the same product, most dangerous first.