Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response message. This only occurs when cache_peer is used with the cache digests feature. The problem exists because peerDigestHandleReply() livelocking in peer_digest.cc mishandles EOF.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
07 Nov 2023, 03:20
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2020-08-24 18:15
Updated : 2024-02-28 17:47
NVD link : CVE-2020-24606
Mitre link : CVE-2020-24606
CVE.ORG link : CVE-2020-24606
JSON object : View
Products Affected
opensuse
- leap
fedoraproject
- fedora
canonical
- ubuntu_linux
debian
- debian_linux
squid-cache
- squid
CWE
CWE-667
Improper Locking