Red Hat Security Advisory: squid security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111) * squid: denial of service in HTTP header parser (CVE-2024-25617) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
Red Hat Product Security issued an advisory for two denial of service vulnerabilities in Squid, a high-performance proxy caching server. CVE-2024-25111 involves denial of service in HTTP chunked decoding, and CVE-2024-25617 involves denial of service in the HTTP header parser. These vulnerabilities could cause service disruption by crashing or hanging the Squid proxy. Red Hat has provided updated packages for Red Hat Enterprise Linux 9.0 Extended Update Support and related distributions to mitigate these issues.
Potential Impact
Successful exploitation of these vulnerabilities could result in denial of service conditions, causing the Squid proxy server to become unresponsive or crash. This impacts availability of the proxy service but does not indicate code execution or data compromise based on the provided information.
Mitigation Recommendations
Red Hat has released security updates for Squid in Red Hat Enterprise Linux 9.0 Extended Update Support and related variants. Applying these updates will remediate the vulnerabilities. The update process will automatically restart the Squid service. Users should follow Red Hat's official update instructions at https://access.redhat.com/articles/11258 to apply the fix. Patch status is confirmed as fixed in the updated packages provided by Red Hat.
Red Hat Security Advisory: squid security update
Description
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111) * squid: denial of service in HTTP header parser (CVE-2024-25617) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat Product Security issued an advisory for two denial of service vulnerabilities in Squid, a high-performance proxy caching server. CVE-2024-25111 involves denial of service in HTTP chunked decoding, and CVE-2024-25617 involves denial of service in the HTTP header parser. These vulnerabilities could cause service disruption by crashing or hanging the Squid proxy. Red Hat has provided updated packages for Red Hat Enterprise Linux 9.0 Extended Update Support and related distributions to mitigate these issues.
Potential Impact
Successful exploitation of these vulnerabilities could result in denial of service conditions, causing the Squid proxy server to become unresponsive or crash. This impacts availability of the proxy service but does not indicate code execution or data compromise based on the provided information.
Mitigation Recommendations
Red Hat has released security updates for Squid in Red Hat Enterprise Linux 9.0 Extended Update Support and related variants. Applying these updates will remediate the vulnerabilities. The update process will automatically restart the Squid service. Users should follow Red Hat's official update instructions at https://access.redhat.com/articles/11258 to apply the fix. Patch status is confirmed as fixed in the updated packages provided by Red Hat.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:1833
- Cve Count
- 2
- Additional Cves
- ["CVE-2024-25617"]
- Cvss Version
- null
Threat ID: 6a3e805ccef61ccff9700cda
Added to database: 06/26/2026, 13:36:28 UTC
Last enriched: 06/26/2026, 13:41:42 UTC
Last updated: 07/06/2026, 08:51:12 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.