CVE:CVE-2018-1000024
CNNVD:CNNVD-201802-313
Squid Software Foundation Squid HTTP Caching Proxy是一套开源的HTTP缓存代理软件。
Squid Software Foundation Squid HTTP Caching Proxy 3.0版本至3.5.27版本和4.0版本至4.0.22版本中的ESI响应的处理存在安全漏洞。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade squid-cache squid to a higher version than 3.5.27,4.0.22,and avoid the version [3.0,3.5.27],[4.0,4.0.22]; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,and avoid the version 14.04,16.04,17.10