CVE-2021-46784

Katalog CVE

CVSS 6.5 · Medium EPSS 5,1%

Kerentanan Reachable Assertion pada squid-cache squid, debian linux. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.

Rincian

Terbit di NVD

17 Juli 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

5,1% peluang dieksploitasi; lebih tinggi dari 92,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.squid-cache.org/Versions/v5/changesets/SQUID-2021_7.patch patch · advisory vendor
• https://github.com/squid-cache/squid/commit/5e2ea2b13bd98f53e29964ca26bb0d602a8a12b9 patch · advisory pihak ketiga
• https://github.com/squid-cache/squid/security/advisories/GHSA-f5cp-6rh3-284w mitigasi · patch · advisory pihak ketiga
• https://security-tracker.debian.org/tracker/CVE-2021-46784 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20221223-0007/ advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/10/13/1
• http://www.openwall.com/lists/oss-security/2023/10/13/10
• http://www.openwall.com/lists/oss-security/2023/10/21/1
• http://www.squid-cache.org/Versions/v4/changesets/SQUID-2021_7.patch broken link