Squid: denial of service in http digest authentication
Red Hat · Red Hat Enterprise Linux 6 Extended Lifecycle Support
The Squid proxy component shipped with Red Hat Enterprise Linux 6 Extended Lifecycle Support contains a buffer overflow in its HTTP Digest Authentication handling, where input is copied without checking its size. A remote attacker with no privileges and no user interaction can exploit it by sending up to 2 MB of arbitrary data to heap memory, but only when Squid is configured to accept HTTP Digest Authentication.
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
- Exploited
- Not confirmed
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
Disclosed on 3 Nov 2023. No public exploit code or confirmed exploitation is recorded.
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
What security researchers reported
Not named in any threat report yetAlso mentioned in 3 community threat pulses (AlienVault OTX)
Weaker evidencePulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.
- Red Hat (Pulse by bd.taylor)2 Dec 2023
- Red Hat (Pulse by bd.taylor)2 Dec 2023
- Red Hat1 Dec 2023