CoreCVE
Back

HIGH

Denial of Service in Helper Process management

Published Dec 4, 2023

Description

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Denial of Service attack against its Helper process management. This bug is fixed by Squid version 6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products

Remediation

Red Hat statement

The only security impact of this vulnerability is a remote denial of service. For this reason, this flaw was rated with an important, and not critical, severity.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Metrics

Weaknesses (3)

CWE-253

CWE-617

CWE-754

References (11)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner GitHub_M
Published Dec 4, 2023
Updated Feb 13, 2025
Reserved Nov 24, 2023
Link CVE-2023-49286
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2023-49286
Red Hat
Severity Important
Public date Dec 4, 2023
Links CVE-2023-49286 - Bugzilla