AIKIDO-2026-10090
squid-cache.squid is vulnerable to Denial of Service (DoS)
40
Medium Risk
This Affects:
squid-cache.squidTL;DR
Affected versions of this package have multiple robustness issues in the ICMP handling code, including insufficient validation of packet headers and unsafe assumptions about buffer and payload sizes that could lead to undefined behavior, crashes, or denial of service. The patched version hardens ICMP echo path validation, fixes potential overflows and undefined behavior, and improves safety checks to prevent these issues.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
squid-cache.squid is vulnerable to Denial of Service (DoS) in versions 0.1 - 7.3.
How to fix this
Upgrade the squid-cache.squid library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant