{"schemaVersion":3,"id":"MGASA-2018-0095","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated squid packages fix security vulnerabilities\n\nDue to incorrect pointer handling Squid is vulnerable to denial\nof service attack when processing ESI responses. This problem allows a\nremote server delivering certain ESI response syntax to trigger a denial\nof service for all clients accessing the Squid service (SQUID-2018:1).\n\nDue to incorrect pointer handling Squid is vulnerable to denial of\nservice attack when processing ESI responses or downloading intermediate\nCA certificates. This problem allows a remote client delivering certain\nHTTP requests in conjunction with certain trusted server responses to\ntrigger a denial of service for all clients accessing the Squid service\n(SQUID-2018:2).","dates":{"published":"2018-01-24T22:37:59.000Z","modified":"2026-04-16T04:27:02.340Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"squid","name":"squid","label":"squid","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/squid","purlType":"rpm","versions":[{"text":"< 3.5.23-1.1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.23-1.1.mga5","eol":null,"hubHref":null},{"vendor":"mageia","product":"squid","name":"squid","label":"squid","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/squid","purlType":"rpm","versions":[{"text":"< 3.5.26-1.1.mga6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.26-1.1.mga6","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2018-0095.html","label":"advisories.mageia.org/MGASA-2018-0095.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22440","label":"bugs.mageia.org/show_bug.cgi?id=22440","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2018_1.txt","label":"www.squid-cache.org/Advisories/SQUID-2018_1.txt","hostname":"www.squid-cache.org","tags":["WEB"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2018_2.txt","label":"www.squid-cache.org/Advisories/SQUID-2018_2.txt","hostname":"www.squid-cache.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-01-24T22:37:59.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T04:27:02.340Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T18:24:18.312Z","stale":false,"partial":false}}