CVE & CISA-KEV Catalog

CVE-2024-25617

MEDIUMEPSS 100th pctl

5.3

CVSS v3

Description

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of Service when sending oversized headers in HTTP messages. In versions of Squid prior to 6.5 this can be achieved if the request_header_max_size or reply_header_max_size settings are unchanged from the default. In Squid version 6.5 and later, the default setting of these parameters is safe. Squid will emit a critical warning in cache.log if the administrator is setting these parameters to unsafe values. Squid will not at this time prevent these settings from being changed to unsafe values. Users are advised to upgrade to version 6.5. There are no known workarounds for this vulnerability. This issue is also tracked as SQUID-2024:2

CWE-182 CWE-400Resource Exhaustion

How to fix

Remediation Available

squidDebian

Fixed in:4.13-10+deb11u3CVE-2024-25617

Fixed in:5.7-2+deb12u1CVE-2024-25617

Fixed in:6.5-1CVE-2024-25617

Fixed in:6.5-1CVE-2024-25617

libecapRed Hat / RHEL

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.src::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2024:1375

libecapRocky

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.src::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2024:1375

libecap-debuginfoRed Hat / RHEL

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1832

libecap-debuginfoRocky

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:2777

libecap-debugsourceRocky

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1062

libecap-debugsourceRed Hat / RHEL

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1066

libecap-develRocky

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1832

libecap-develRed Hat / RHEL

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1832

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.9.0+19703+a1da7223.x86_64::squid:4RHSA-2024:1375

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4RHSA-2024:1066

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:2777

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1062

Fixed in:0:1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4RHSA-2024:1832

squidRocky

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10.ppc64RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.x86_64::squid:4RHSA-2024:1066

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.ppc64le::squid:4RHSA-2024:2777

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.src::squid:4RHSA-2024:1375

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.aarch64::squid:4RHSA-2024:1375

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.src::squid:4RHSA-2024:1832

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.ppc64le::squid:4RHSA-2024:1375

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.ppc64le::squid:4RHSA-2024:1832

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.s390x::squid:4RHSA-2024:1375

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.x86_64::squid:4RHSA-2024:1375

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.src::squid:4RHSA-2024:1062

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.x86_64::squid:4RHSA-2024:1832

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.aarch64::squid:4RHSA-2024:1062

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.ppc64le::squid:4RHSA-2024:1066

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.ppc64le::squid:4RHSA-2024:1062

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.s390x::squid:4RHSA-2024:1066

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.s390x::squid:4RHSA-2024:1062

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.aarch64::squid:4RHSA-2024:1066

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.x86_64::squid:4RHSA-2024:1062

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.src::squid:4RHSA-2024:1066

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.src::squid:4RHSA-2024:2777

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.x86_64::squid:4RHSA-2024:2777

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

squidRed Hat / RHEL

Fixed in:7:3.5.20-17.el7_9.10.ppc64RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.ppc64le::squid:4RHSA-2024:1375

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.ppc64le::squid:4RHSA-2024:1832

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.src::squid:4RHSA-2024:1062

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.aarch64::squid:4RHSA-2024:1066

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.aarch64::squid:4RHSA-2024:1062

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.ppc64le::squid:4RHSA-2024:1062

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.aarch64::squid:4RHSA-2024:1375

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.s390x::squid:4RHSA-2024:1062

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.s390x::squid:4RHSA-2024:1066

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.x86_64::squid:4RHSA-2024:1062

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.src::squid:4RHSA-2024:1375

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.src::squid:4RHSA-2024:1832

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.x86_64::squid:4RHSA-2024:1832

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.ppc64le::squid:4RHSA-2024:1066

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.src::squid:4RHSA-2024:1066

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.ppc64le::squid:4RHSA-2024:2777

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.s390x::squid:4RHSA-2024:1375

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.x86_64::squid:4RHSA-2024:2777

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.src::squid:4RHSA-2024:2777

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.x86_64::squid:4RHSA-2024:1066

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.x86_64::squid:4RHSA-2024:1375

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

squid-debuginfoRocky

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10.ppc64RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.x86_64::squid:4RHSA-2024:1375

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.x86_64::squid:4RHSA-2024:1066

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.s390x::squid:4RHSA-2024:1375

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.ppc64le::squid:4RHSA-2024:1375

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.aarch64::squid:4RHSA-2024:1375

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.ppc64le::squid:4RHSA-2024:1062

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.x86_64::squid:4RHSA-2024:2777

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.ppc64le::squid:4RHSA-2024:2777

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.x86_64::squid:4RHSA-2024:1062

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.aarch64::squid:4RHSA-2024:1062

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.s390x::squid:4RHSA-2024:1062

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.ppc64le::squid:4RHSA-2024:1066

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.ppc64le::squid:4RHSA-2024:1832

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.aarch64::squid:4RHSA-2024:1066

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.s390x::squid:4RHSA-2024:1066

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.x86_64::squid:4RHSA-2024:1832

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

squid-debuginfoRed Hat / RHEL

Fixed in:7:3.5.20-17.el7_9.10.ppc64RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.x86_64::squid:4RHSA-2024:1832

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.s390x::squid:4RHSA-2024:1066

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.ppc64le::squid:4RHSA-2024:1066

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.x86_64::squid:4RHSA-2024:1375

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.aarch64::squid:4RHSA-2024:1066

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.x86_64::squid:4RHSA-2024:2777

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.s390x::squid:4RHSA-2024:1062

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.ppc64le::squid:4RHSA-2024:2777

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.s390x::squid:4RHSA-2024:1375

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.x86_64::squid:4RHSA-2024:1062

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.ppc64le::squid:4RHSA-2024:1375

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.aarch64::squid:4RHSA-2024:1062

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.aarch64::squid:4RHSA-2024:1375

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.ppc64le::squid:4RHSA-2024:1062

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.ppc64le::squid:4RHSA-2024:1832

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.x86_64::squid:4RHSA-2024:1066

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

squid-debugsourceRed Hat / RHEL

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.s390x::squid:4RHSA-2024:1062

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.x86_64::squid:4RHSA-2024:1062

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.ppc64le::squid:4RHSA-2024:1832

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.x86_64::squid:4RHSA-2024:1832

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.ppc64le::squid:4RHSA-2024:1066

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.ppc64le::squid:4RHSA-2024:2777

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.s390x::squid:4RHSA-2024:1375

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.ppc64le::squid:4RHSA-2024:1375

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.s390x::squid:4RHSA-2024:1066

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.x86_64::squid:4RHSA-2024:2777

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.aarch64::squid:4RHSA-2024:1062

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.x86_64::squid:4RHSA-2024:1066

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.aarch64::squid:4RHSA-2024:1066

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.aarch64::squid:4RHSA-2024:1375

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.x86_64::squid:4RHSA-2024:1375

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.ppc64le::squid:4RHSA-2024:1062

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

squid-debugsourceRocky

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.ppc64le::squid:4RHSA-2024:1062

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.x86_64::squid:4RHSA-2024:1066

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.s390x::squid:4RHSA-2024:1375

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.aarch64::squid:4RHSA-2024:1062

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.s390x::squid:4RHSA-2024:1066

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.x86_64::squid:4RHSA-2024:1375

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.ppc64le::squid:4RHSA-2024:1066

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.ppc64le::squid:4RHSA-2024:2777

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.x86_64::squid:4RHSA-2024:1832

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.x86_64::squid:4RHSA-2024:1062

Fixed in:7:4.15-3.module+el8.6.0+21376+425c674a.5.aarch64::squid:4RHSA-2024:1066

Fixed in:7:4.15-6.module+el8.8.0+21374+5b4927f1.4.s390x::squid:4RHSA-2024:1062

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.aarch64::squid:4RHSA-2024:1375

Fixed in:7:4.11-4.module+el8.4.0+21523+3cc98f8b.8.ppc64le::squid:4RHSA-2024:1832

Fixed in:7:4.4-8.module+el8.2.0+21527+aa63d5ff.9.x86_64::squid:4RHSA-2024:2777

Fixed in:7:4.15-7.module+el8.9.0+21530+59b09a5b.10.ppc64le::squid:4RHSA-2024:1375

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.5-5.el9_2.5RHSA-2024:1184

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.5-6.el9_3.8RHSA-2024:1376

Fixed in:7:5.2-1.el9_0.6RHSA-2024:1833

squid-migration-scriptRed Hat / RHEL

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10.ppc64RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

squid-migration-scriptRocky

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10.ppc64RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

squid-sysvinitRed Hat / RHEL

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10.ppc64RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

squid-sysvinitRocky

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10RHSA-2024:1787

Fixed in:7:3.5.20-17.el7_9.10.ppc64RHSA-2024:1787

squidUbuntu

Fixed in:3.5.12-1ubuntu7.16+esm3USN-6857-1

Fixed in:3.5.27-1ubuntu1.14+esm2USN-6857-1

Fixed in:4.10-1ubuntu1.10USN-6728-1

Fixed in:5.7-0ubuntu0.22.04.4USN-6728-1

Fixed in:6.1-2ubuntu1.3USN-6728-1

squid3Ubuntu

Fixed in:3.5.12-1ubuntu7.16+esm3USN-6857-1

Fixed in:3.5.27-1ubuntu1.14+esm2USN-6857-1

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityNone

AvailabilityLow

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploit Intelligence

88.86%probability of exploitation in 30 days

100thpercentile

Very high risk: more likely to be exploited than 100% of all known CVEs.

References

Patch2

Vendor Advisory1

github.com

Related Vulnerabilities

Other CWE-182 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2020-7921	Medium	4.6	0.7%	-	Fix
CVE-2026-47241	Low	2.1	0.2%	-	Fix

Common questions

How do I fix CVE-2024-25617?

Published advisories record a fix for 21 affected products. The "How to fix" section on this page lists the fixed version and source advisory for each one, so apply the entry matching what you actually run.

Is CVE-2024-25617 being actively exploited?

Not that we know of. CVE-2024-25617 is not in the CISA Known Exploited Vulnerabilities catalog. Its EPSS score of 88.9% is the estimated probability that it will be exploited in the next 30 days. That is higher than 100% of all scored CVEs.

How severe is CVE-2024-25617?

CVE-2024-25617 has a CVSS v3 base score of 5.3, rated medium. CVSS rates the technical impact if the vulnerability is exploited, not how likely that is, so weigh it alongside the exploit-prediction score when you decide what to patch first.

What does CVE-2024-25617 affect?

Published advisories record a fix for squid (Debian), libecap (Red Hat / RHEL), libecap (Rocky), libecap-debuginfo (Red Hat / RHEL), and 17 more. Only products with a sourced advisory are listed, so treat this as what we can cite rather than a complete inventory.

Embed a live status badge for CVE-2024-25617

Markdown

[![CVE-2024-25617](https://tridentstack.com/cve/badge/CVE-2024-25617.svg)](https://tridentstack.com/cve/CVE-2024-25617)

HTML

<a href="https://tridentstack.com/cve/CVE-2024-25617"><img src="https://tridentstack.com/cve/badge/CVE-2024-25617.svg" alt="CVE-2024-25617"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it works Start freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-06-25.