Squid Vulnerable to Denial of Service Attack Due to Bug

CVE-2024-25617

What is CVE-2024-25617?

A denial of service vulnerability exists in Squid, an open source caching proxy supporting multiple protocols like HTTP and HTTPS. This issue arises from a bug that causes certain oversized headers in HTTP messages to generate unsafe values. With default configurations retained, a remote client or server can exploit this flaw to trigger a denial of service. Users are strongly advised to upgrade to Squid version 6.5 or later, where safer default settings for header sizes are in place. Administrators are warned via cache.log if they attempt to set these parameters to unsafe values, although there's currently no restriction preventing such changes.

References