8.7Yüksek

CVE-2026-32748Squid has Denial of Service in ICP Response handling

squid-cache squid; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Exten… Yayım: 2026-03-26 03:11 (7 ay önce)

Açıklama

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable Denial of Service attack against the Squid service using ICP protocol. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem _cannot_ be mitigated by denying ICP queries using `icp_access` rules. This bug is fixed in Squid version 7.5.

Zayıflık türü (CWE): CWE-413 CWE-416 CWE-826

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
Red Hat	Red Hat Enterprise Linux 10	all versions
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	all versions
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	all versions
Red Hat	Red Hat Enterprise Linux 8	all versions
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	all versions
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	all versions
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	all versions
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	all versions
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	all versions
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	all versions
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	all versions
Red Hat	Red Hat Enterprise Linux 9	all versions
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	all versions
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	all versions
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	all versions
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	all versions
squid-cache	squid	< 7.5

Ubuntu düzeltmeleri

USN-8941-1 Squid vulnerabilities Ubuntu 24.04, 22.04, 20.04, 18.04, 16.04 · 20.10.2026 · squid, squid3

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (1)

cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:* < 7.5

CVSS puanı

8.7Yüksek

Kaynak: GitHub_M · CVSS 4.0

Saldırı yolu: Ağ
Karmaşıklık: Düşük
Ön koşul: Yok
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekmez
Gizlilik: Yok
Bütünlük: Yok
Erişilebilirlik: Yüksek

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

Tüm puanlar (5)

cna	CVSS 4.0	8.7Yüksek
redhat-SADP	CVSS 3.1	7.5Yüksek
security-advisories@github.com	CVSS 4.0	8.7Yüksek
nvd	CVSS 3.1	7.5Yüksek
0b0ca135-0b70-47e7-9f44-1890c2a1c46c	CVSS 3.1	7.5Yüksek

EPSS (30 günde istismar olasılığı)

9.06%

tüm CVE'lerin %95'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: none
Otomatikleştirilebilir: yes
Teknik etki: partial

Zaman çizelgesi

Numara ayrıldı2026-03-13
Yayımlandı2026-03-26 03:11
IP-DB'ye ulaştı2026-10-24 23:36
Son güncelleme2026-07-15 05:20

Numarayı veren (CNA): GitHub_M
NVD durumu: Modified

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Ubuntu 20.04 LTS

7.7Yüksek

CVE-2026-109518 7 gün önce

APT RCE via hard link reuse

Debian APT; Ubuntu APT

On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into install…

Puansız

CVE-2026-98912 19 gün önce

ALSA: seq: oss: Reject reads that cannot fit the next event

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next event snd_seq_oss_read() checks whether the next queued OSS sequencer event fits in the remaining userspace buffer before removing it f…

7.5Yüksek

CVE-2026-98911 19 gün önce

dpaa2-switch: fix the error path in dpaa2_switch_rx()

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2_switch_rx() In case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd() function is called in order to free the FD. This is incorrect sinc…

Puansız

CVE-2026-98909 19 gün önce

net: cpsw_new: unregister devlink on port registration failure

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: unregister devlink on port registration failure cpsw_probe() registers devlink before registering the CPSW ports. If cpsw_register_ports() fails, the error path only unregis…

Puansız

CVE-2026-98907 19 gün önce

btrfs: protect sb_write_pointer() with invalidate lock

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb_write_pointer() with invalidate lock sb_write_pointer() reads the super block from the block device page cache using read_cache_page_gfp(). This has the same race with BLK…

Puansız

CVE-2026-98902 19 gün önce

md/raid5: let stripe batch bm_seq comparison wrap-safe

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bm_seq comparison wrap-safe Once the 32-bit seq wraps, a newer bm_seq can look smaller than old, so .. covert to wrap-safe calculate way.