Re: Squid Caching Proxy Security Audit: 55 Vulnerabilities, 35 0days.

[Amos Jeffries <squid3 () treenet co nz>]

Some reference updates.


On 11/10/23 20:55, Joshua Rogers wrote:
> The issues are listed below. Due to the sheer size of issues discovered,
> technical details are not included in this email. However, breakdowns of
> the code and proof-of-concepts can be found on GitHub:
> https://megamansec.github.io/Squid-Security-Audit/

> Cache Poisoning by Large Stored Response Headers (With Bonus XSS)

 ... GHSA-543m-w2m2-g255

> Gopher Assertion Crash

 ... GHSA-f5cp-6rh3-284w

> Assertion in Gopher Response Handling

 ... CVE-2021-46784 / GHSA-f5cp-6rh3-284w



AYJ