CVE & CISA-KEV Catalog

CVE-2023-5824

HIGHEPSS 92th pctl

7.5

CVSS v3

Description

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.

How to fix

Remediation Available

squidDebian

Fixed in:4.13-10+deb11u5CVE-2023-5824

Fixed in:5.7-2+deb12u3CVE-2023-5824

Fixed in:6.5-1CVE-2023-5824

Fixed in:6.5-1CVE-2023-5824

libecapRocky

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.src::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:0773

libecapRed Hat / RHEL

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.src::squid:4RHSA-2023:7668

libecap-debuginfoRed Hat / RHEL

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0771

libecap-debuginfoRocky

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0771

libecap-debugsourceRed Hat / RHEL

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2023:7668

libecap-debugsourceRocky

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0397

libecap-develRocky

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0773

libecap-develRed Hat / RHEL

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0772

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:0397

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:0771

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:0773

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2023:7668

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2023:7668

squidRocky

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.x86_64::squid:4RHSA-2024:0397

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.src::squid:4RHSA-2024:0773

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.x86_64::squid:4RHSA-2024:0773

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.ppc64le::squid:4RHSA-2024:0773

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.src::squid:4RHSA-2024:0771

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.aarch64::squid:4RHSA-2024:0771

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.ppc64le::squid:4RHSA-2024:0771

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.s390x::squid:4RHSA-2024:0771

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.x86_64::squid:4RHSA-2024:0771

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.src::squid:4RHSA-2024:0397

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.aarch64::squid:4RHSA-2024:0397

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.ppc64le::squid:4RHSA-2024:0397

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.s390x::squid:4RHSA-2024:0397

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.src::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.aarch64::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.ppc64le::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.s390x::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.x86_64::squid:4RHSA-2023:7668

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.src::squid:4RHSA-2024:0772

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.x86_64::squid:4RHSA-2024:0772

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.ppc64le::squid:4RHSA-2024:0772

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

squidRed Hat / RHEL

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.src::squid:4RHSA-2024:0773

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.x86_64::squid:4RHSA-2024:0773

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.ppc64le::squid:4RHSA-2024:0773

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.src::squid:4RHSA-2024:0771

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.aarch64::squid:4RHSA-2024:0771

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.ppc64le::squid:4RHSA-2024:0771

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.s390x::squid:4RHSA-2024:0771

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.x86_64::squid:4RHSA-2024:0771

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.src::squid:4RHSA-2024:0397

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.aarch64::squid:4RHSA-2024:0397

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.ppc64le::squid:4RHSA-2024:0397

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.s390x::squid:4RHSA-2024:0397

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.x86_64::squid:4RHSA-2024:0397

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.src::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.aarch64::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.ppc64le::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.s390x::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.x86_64::squid:4RHSA-2023:7668

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.src::squid:4RHSA-2024:0772

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.x86_64::squid:4RHSA-2024:0772

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.ppc64le::squid:4RHSA-2024:0772

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

squid-debuginfoRocky

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.s390x::squid:4RHSA-2024:0771

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.ppc64le::squid:4RHSA-2024:0397

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.x86_64::squid:4RHSA-2024:0772

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.ppc64le::squid:4RHSA-2024:0771

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.x86_64::squid:4RHSA-2024:0771

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.ppc64le::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.s390x::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.aarch64::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.x86_64::squid:4RHSA-2023:7668

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.aarch64::squid:4RHSA-2024:0771

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.s390x::squid:4RHSA-2024:0397

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.ppc64le::squid:4RHSA-2024:0773

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.x86_64::squid:4RHSA-2024:0773

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.x86_64::squid:4RHSA-2024:0397

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.ppc64le::squid:4RHSA-2024:0772

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.aarch64::squid:4RHSA-2024:0397

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

squid-debuginfoRed Hat / RHEL

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.s390x::squid:4RHSA-2024:0771

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.aarch64::squid:4RHSA-2023:7668

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.x86_64::squid:4RHSA-2024:0397

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.s390x::squid:4RHSA-2023:7668

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.ppc64le::squid:4RHSA-2024:0771

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.s390x::squid:4RHSA-2024:0397

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.aarch64::squid:4RHSA-2024:0771

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.ppc64le::squid:4RHSA-2024:0772

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.aarch64::squid:4RHSA-2024:0397

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.ppc64le::squid:4RHSA-2024:0397

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.ppc64le::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.x86_64::squid:4RHSA-2023:7668

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.x86_64::squid:4RHSA-2024:0772

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.ppc64le::squid:4RHSA-2024:0773

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.x86_64::squid:4RHSA-2024:0771

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.x86_64::squid:4RHSA-2024:0773

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

squid-debugsourceRocky

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.x86_64::squid:4RHSA-2024:0397

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.x86_64::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.aarch64::squid:4RHSA-2023:7668

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.x86_64::squid:4RHSA-2024:0773

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.s390x::squid:4RHSA-2024:0397

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.ppc64le::squid:4RHSA-2024:0397

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.s390x::squid:4RHSA-2023:7668

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.ppc64le::squid:4RHSA-2023:7668

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.ppc64le::squid:4RHSA-2024:0773

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.x86_64::squid:4RHSA-2024:0771

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.s390x::squid:4RHSA-2024:0771

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.ppc64le::squid:4RHSA-2024:0771

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.x86_64::squid:4RHSA-2024:0772

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.aarch64::squid:4RHSA-2024:0397

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.aarch64::squid:4RHSA-2024:0771

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.ppc64le::squid:4RHSA-2024:0772

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

squid-debugsourceRed Hat / RHEL

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.x86_64::squid:4RHSA-2024:0772

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.ppc64le::squid:4RHSA-2023:7668

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.ppc64le::squid:4RHSA-2024:0773

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.ppc64le::squid:4RHSA-2024:0771

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.aarch64::squid:4RHSA-2024:0397

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.ppc64le::squid:4RHSA-2024:0397

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.aarch64::squid:4RHSA-2024:0771

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.x86_64::squid:4RHSA-2024:0397

Fixed in:7:4.15-6.module+el8.8.0+21068+0ecbc070.3.s390x::squid:4RHSA-2024:0397

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.x86_64::squid:4RHSA-2024:0771

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.aarch64::squid:4RHSA-2023:7668

Fixed in:7:4.4-8.module+el8.2.0+21173+22259b09.7.ppc64le::squid:4RHSA-2024:0772

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.s390x::squid:4RHSA-2023:7668

Fixed in:7:4.11-4.module+el8.4.0+21174+3894a031.6.x86_64::squid:4RHSA-2024:0773

Fixed in:7:4.15-7.module+el8.9.0+20806+014d88aa.3.x86_64::squid:4RHSA-2023:7668

Fixed in:7:4.15-3.module+el8.6.0+21069+a1561e3d.4.s390x::squid:4RHSA-2024:0771

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.5-6.el9_3.2RHSA-2023:7465

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

Fixed in:7:5.2-1.el9_0.4RHSA-2024:1153

Fixed in:7:5.5-5.el9_2.3RHSA-2024:0072

squidUbuntu

Fixed in:4.10-1ubuntu1.10USN-6728-1

Fixed in:4.10-1ubuntu1.12USN-6728-3

Fixed in:5.7-0ubuntu0.22.04.4USN-6728-1

Fixed in:6.1-2ubuntu1.3USN-6728-1

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityNone

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

5.19%probability of exploitation in 30 days

92ndpercentile

High risk: more likely to be exploited than 92% of all known CVEs.

References

Vendor Advisory1

github.com

Third-Party Advisory1

access.redhat.com

Issue Tracking1

bugzilla.redhat.com

Other references10

Related Vulnerabilities

Other CWE-755 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2017-5638	Critical	9.8	100%	KEV + Ransom	Fix
CVE-2020-7247	Critical	9.8	99%	KEV	Fix
CVE-2023-36933	High	7.5	72%	-	Fix
CVE-2018-0934	High	7.5	67%	-	Fix
CVE-2019-14287	High	8.8	64%	-	Fix
CVE-2019-12815	Critical	9.8	58%	-	Fix

Common questions

How do I fix CVE-2023-5824?

Published advisories record a fix for 16 affected products. The "How to fix" section on this page lists the fixed version and source advisory for each one, so apply the entry matching what you actually run.

Is CVE-2023-5824 being actively exploited?

Not that we know of. CVE-2023-5824 is not in the CISA Known Exploited Vulnerabilities catalog. Its EPSS score of 5.2% is the estimated probability that it will be exploited in the next 30 days. That is higher than 92% of all scored CVEs.

How severe is CVE-2023-5824?

CVE-2023-5824 has a CVSS v3 base score of 7.5, rated high. CVSS rates the technical impact if the vulnerability is exploited, not how likely that is, so weigh it alongside the exploit-prediction score when you decide what to patch first.

What does CVE-2023-5824 affect?

Published advisories record a fix for squid (Debian), libecap (Rocky), libecap (Red Hat / RHEL), libecap-debuginfo (Red Hat / RHEL), and 12 more. Only products with a sourced advisory are listed, so treat this as what we can cite rather than a complete inventory.

Embed a live status badge for CVE-2023-5824

Markdown

[![CVE-2023-5824](https://tridentstack.com/cve/badge/CVE-2023-5824.svg)](https://tridentstack.com/cve/CVE-2023-5824)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-5824"><img src="https://tridentstack.com/cve/badge/CVE-2023-5824.svg" alt="CVE-2023-5824"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it works Start freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-11-03.