Denial of Service Vulnerability in Squid Proxy Server by Trusted Peers
CVE-2020-24606

8.6HIGH

Key Information:

Vendor: Squid-cache
Status: Squid
Vendor: CVE Published:; 24 August 2020

🔔 Create Squid-cache Vulnerability Alert

What is CVE-2020-24606?

A vulnerability in Squid Proxy Server allows a trusted peer to execute Denial of Service attacks by exploiting a flaw in the handling of crafted Cache Digest response messages. When the cache_peer is utilized alongside the cache digests feature, this vulnerability occurs due to improper management of EOF in the peerDigestHandleReply() function, leading to a livelock that consumes all available CPU cycles.