Detections
Analytics
FreeBSD : squid -- remote DoS in HTTP response processing (660ebbf5-daeb-11e5-b2bd-002590263bf5)
high Nessus Plugin ID 88944
Language:
Synopsis
The remote FreeBSD host is missing a security-related update.Description
Squid security advisory 2016:2 reports :Due to incorrect bounds checking Squid is vulnerable to a denial of service attack when processing HTTP responses.
These problems allow remote servers delivering certain unusual HTTP response syntax to trigger a denial of service for all clients accessing the Squid service.
HTTP responses containing malformed headers that trigger this issue are becoming common. We are not certain at this time if that is a sign of malware or just broken server scripting.
Solution
Update the affected package.See Also
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207454
http://www.squid-cache.org/Advisories/SQUID-2016_2.txt
Plugin Details
Severity: High
ID: 88944
File Name: freebsd_pkg_660ebbf5daeb11e5b2bd002590263bf5.nasl
Version: 2.7
Type: local
Family: FreeBSD Local Security Checks
Published: 2/25/2016
Updated: 1/4/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS v3
Risk Factor: High
Base Score: 7.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:squid, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 2/24/2016
Vulnerability Publication Date: 2/24/2016