tocsin

Alpine/squid: medium 5.3

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

Action: Upgrade squid to 6.4-r0 or later.

Affected

introducedfixedlast affected
2.66.4-r0-

Fixed versions

6.4-r0

Sources

published · modified · JSON