UpHeron
All vulnerabilities

Servers and applications

CVE-2023-50269

SQUID-2023:10 Denial of Service in HTTP Request parsing

Severity
High 7.5
Published
14 Dec 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Also known as
GHSA-wgq4-4cfg-c4x3
Sources
NVD, Project advisories (GitHub)

Description

Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to perform Denial of Service attack by sending a large X-Forwarded-For header when the…

Affected software

SoftwareAffected versions
SquidServers and applications · cpe:a:squid-cache:squid
  • From 6.0.1 up to 6.5
  • From 3.1 up to 5.9
  • Version 2.7-stable9
  • Version 2.7-stable8
All 13 release lines
  • Version 2.6
  • Version 2.7
  • Version 2.7-stable1
  • Version 2.7-stable2
  • Version 2.7-stable3
  • Version 2.7-stable4
  • Version 2.7-stable5
  • Version 2.7-stable6
  • Version 2.7-stable7
  • Version 2.7-stable8
  • Version 2.7-stable9
  • From 3.1 up to 5.9
  • From 6.0.1 up to 6.5
SquidServers and applications · github:squid-cache/squid
  • Version 2.6-2.7.STABLE9

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-50269
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-50269
  • GitHub Advisory Database https://github.com/advisories/GHSA-wgq4-4cfg-c4x3
  • github.com https://github.com/squid-cache/squid/security/advisories/GHSA-wgq4-4cfg-c4x3