[ADVISORY] SQUID-2020:9 Denial of Service processing Cache Digest Response
Amos Jeffries <[email protected]> Sun, 23 Aug 2020 20:17:38 +1200
| Newsgroups | gmane.comp.web.squid.announce |
|---|---|
| Message-ID | <bebcbc56-ad06-704a-6f1f-171d978004b5__46439.4242897228$1598171930$gmane$org@treenet.co.nz> |
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fCgpTcXVpZCBQcm94eSBDYWNoZSBTZWN1cml0eSBVcGRhdGUgQWR2aXNvcnkgU1FV SUQtMjAyMDo5Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwoKQWR2aXNvcnkgSUQ6ICAgICAgIHwgU1FVSUQtMjAyMDo5CkRh dGU6ICAgICAgICAgICAgICB8IEF1Z3VzdCAyMywgMjAyMApTdW1tYXJ5OiAgICAgICAgICAgfCBE ZW5pYWwgb2YgU2VydmljZQogICAgICAgICAgICAgICAgICAgfCBwcm9jZXNzaW5nIENhY2hlIERp Z2VzdCBSZXNwb25zZQpBZmZlY3RlZCB2ZXJzaW9uczogfCBTcXVpZCAzLnggLT4gMy41LjI4CiAg ICAgICAgICAgICAgICAgICB8IFNxdWlkIDQueCAtPiA0LjEyCiAgICAgICAgICAgICAgICAgICB8 IFNxdWlkIDUueCAtPiA1LjAuMwpGaXhlZCBpbiB2ZXJzaW9uOiAgfCBTcXVpZCA0LjEzIGFuZCA1 LjAuNApfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18KCiAgICBDVkUgQXNzaWdubWVudCBwZW5kaW5nCl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKUHJv YmxlbSBEZXNjcmlwdGlvbjoKCiBEdWUgdG8gSW1wcm9wZXIgSW5wdXQgVmFsaWRhdGlvbiBTcXVp ZCBpcyB2dWxuZXJhYmxlIHRvIGEgRGVuaWFsCiBvZiBTZXJ2aWNlIGF0dGFjayBhZ2FpbnN0IHRo ZSBtYWNoaW5lIG9wZXJhdGluZyBTcXVpZC4KCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKU2V2ZXJpdHk6CgogVGhpcyBw cm9ibGVtIGFsbG93cyBhIHRydXN0ZWQgcGVlciB0byBkZWxpdmVyIHRvIHBlcmZvcm0gRGVuaWFs CiBvZiBTZXJ2aWNlIGJ5IGNvbnN1bWluZyBhbGwgYXZhaWxhYmxlIENQVSBjeWNsZXMgb24gdGhl IG1hY2hpbmUKIHJ1bm5pbmcgU3F1aWQgd2hlbiBoYW5kbGluZyBhIGNyYWZ0ZWQgQ2FjaGUgRGln ZXN0IHJlc3BvbnNlCiBtZXNzYWdlLgoKIFRoaXMgYXR0YWNrIGlzIGxpbWl0ZWQgdG8gU3F1aWQg dXNpbmcgY2FjaGVfcGVlciB3aXRoIGNhY2hlCiBkaWdlc3RzIGZlYXR1cmUuCgpDVlNTIFNjb3Jl IG9mIDkuNQo8aHR0cHM6Ly9udmQubmlzdC5nb3YvdnVsbi1tZXRyaWNzL2N2c3MvdjMtY2FsY3Vs YXRvcj92ZWN0b3I9QVY6Ti9BQzpML1BSOk4vVUk6Ti9TOkMvQzpOL0k6Ti9BOkgvRTpIL1JMOk8v UkM6Qy9DUjpYL0lSOlgvQVI6SC9NQVY6Ti9NQUM6TC9NUFI6WC9NVUk6Ti9NUzpDL01DOk4vTUk6 Ti9NQTpIJnZlcnNpb249My4xPgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCgpVcGRhdGVkIFBhY2thZ2VzOgoKVGhpcyBi dWcgaXMgZml4ZWQgYnkgU3F1aWQgdmVyc2lvbnMgNC4xMyBhbmQgNS4wLjQuCgogSW4gYWRkaXRp b24sIHBhdGNoZXMgYWRkcmVzc2luZyB0aGlzIHByb2JsZW0gZm9yIHRoZSBzdGFibGUKIHJlbGVh c2VzIGNhbiBiZSBmb3VuZCBpbiBvdXIgcGF0Y2ggYXJjaGl2ZXM6CgpTcXVpZCA0OgogPGh0dHA6 Ly93d3cuc3F1aWQtY2FjaGUub3JnL1ZlcnNpb25zL3Y0L2NoYW5nZXNldHMvU1FVSUQtMjAyMF85 LnBhdGNoPgoKIElmIHlvdSBhcmUgdXNpbmcgYSBwcmVwYWNrYWdlZCB2ZXJzaW9uIG9mIFNxdWlk IHRoZW4gcGxlYXNlIHJlZmVyCiB0byB0aGUgcGFja2FnZSB2ZW5kb3IgZm9yIGF2YWlsYWJpbGl0 eSBpbmZvcm1hdGlvbiBvbiB1cGRhdGVkCiBwYWNrYWdlcy4KCl9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKRGV0ZXJtaW5p bmcgaWYgeW91ciB2ZXJzaW9uIGlzIHZ1bG5lcmFibGU6CgogQWxsIFNxdWlkIGJ1aWx0IHVzaW5n IC0tZGlzYWJsZS1jYWNoZS1kaWdlc3RzIGFyZSBub3QgdnVsbmVyYWJsZS4KCiBBbGwgU3F1aWQg d2l0aG91dCBjYWNoZV9wZWVyIGRpcmVjdGl2ZXMgY29uZmlndXJlZCBhcmUgbm90CiB2dWxuZXJh YmxlLgoKIEFsbCBTcXVpZC0zLnggdXAgdG8gYW5kIGluY2x1ZGluZyAzLjUuMjggdXNpbmcgY2Fj aGVfcGVlcgogZGlyZWN0aXZlcyB3aXRoIG5vLWRpZ2VzdCBvcHRpb24gY29uZmlndXJlZCBhcmUg bm90IHZ1bG5lcmFibGUuCgogQWxsIFNxdWlkLTMueCB1cCB0byBhbmQgaW5jbHVkaW5nIDMuNS4y OCB1c2luZyBjYWNoZV9wZWVyCiBkaXJlY3RpdmVzIHdpdGhvdXQgdGhlIG5vLWRpZ2VzdCBvcHRp b24gY29uZmlndXJlZCBhcmUKIHZ1bG5lcmFibGUuCgogQWxsIFNxdWlkLTQueCB1cCB0byBhbmQg aW5jbHVkaW5nIDQuMTIgdXNpbmcgY2FjaGVfcGVlcgogZGlyZWN0aXZlcyB3aXRoIG5vLWRpZ2Vz dCBvcHRpb24gY29uZmlndXJlZCBhcmUgbm90IHZ1bG5lcmFibGUuCgogQWxsIFNxdWlkLTQueCB1 cCB0byBhbmQgaW5jbHVkaW5nIDQuMTIgdXNpbmcgY2FjaGVfcGVlcgogZGlyZWN0aXZlcyB3aXRo b3V0IHRoZSBuby1kaWdlc3Qgb3B0aW9uIGNvbmZpZ3VyZWQgYXJlCiB2dWxuZXJhYmxlLgoKIEFs bCBTcXVpZC01LnggdXAgdG8gYW5kIGluY2x1ZGluZyA1LjAuMyB1c2luZyBjYWNoZV9wZWVyCiBk aXJlY3RpdmVzIHdpdGggbm8tZGlnZXN0IG9wdGlvbiBjb25maWd1cmVkIGFyZSBub3QgdnVsbmVy YWJsZS4KCiBBbGwgU3F1aWQtNS54IHVwIHRvIGFuZCBpbmNsdWRpbmcgNS4wLjMgdXNpbmcgY2Fj aGVfcGVlcgogZGlyZWN0aXZlcyB3aXRob3V0IHRoZSBuby1kaWdlc3Qgb3B0aW9uIGNvbmZpZ3Vy ZWQgYXJlCiB2dWxuZXJhYmxlLgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCgpXb3JrYXJvdW5kOgoKRWl0aGVyLAoKIEFk ZCB0aGUgbm8tZGlnZXN0IG9wdGlvbiB0byBhbGwgY2FjaGVfcGVlciBsaW5lcyBpbiBzcXVpZC5j b25mCgpPciwKCiBCdWlsZCBTcXVpZCB3aXRoIC0tZGlzYWJsZS1jYWNoZS1kaWdlc3RzCgpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18KCkNvbnRhY3QgZGV0YWlscyBmb3IgdGhlIFNxdWlkIHByb2plY3Q6CgogRm9yIGluc3Rh bGxhdGlvbiAvIHVwZ3JhZGUgc3VwcG9ydCBvbiBiaW5hcnkgcGFja2FnZWQgdmVyc2lvbnMKIG9m IFNxdWlkOiBZb3VyIGZpcnN0IHBvaW50IG9mIGNvbnRhY3Qgc2hvdWxkIGJlIHlvdXIgYmluYXJ5 CiBwYWNrYWdlIHZlbmRvci4KCiBJZiB5b3UgaW5zdGFsbCBhbmQgYnVpbGQgU3F1aWQgZnJvbSB0 aGUgb3JpZ2luYWwgU3F1aWQgc291cmNlcwogdGhlbiB0aGUgPHNxdWlkLXVzZXJzQGxpc3RzLnNx dWlkLWNhY2hlLm9yZz4gbWFpbGluZyBsaXN0IGlzIHlvdXIKIHByaW1hcnkgc3VwcG9ydCBwb2lu dC4gRm9yIHN1YnNjcmlwdGlvbiBkZXRhaWxzIHNlZQogPGh0dHA6Ly93d3cuc3F1aWQtY2FjaGUu b3JnL1N1cHBvcnQvbWFpbGluZy1saXN0cy5odG1sPi4KCiBGb3IgcmVwb3J0aW5nIG9mIG5vbi1z ZWN1cml0eSBidWdzIGluIHRoZSBsYXRlc3QgU1RBQkxFIHJlbGVhc2UKIHRoZSBzcXVpZCBidWd6 aWxsYSBkYXRhYmFzZSBzaG91bGQgYmUgdXNlZAogPGh0dHA6Ly9idWdzLnNxdWlkLWNhY2hlLm9y Zy8+LgoKIEZvciByZXBvcnRpbmcgb2Ygc2VjdXJpdHkgc2Vuc2l0aXZlIGJ1Z3Mgc2VuZCBhbiBl bWFpbCB0byB0aGUKIDxzcXVpZC1idWdzQGxpc3RzLnNxdWlkLWNhY2hlLm9yZz4gbWFpbGluZyBs aXN0LiBJdCdzIGEgY2xvc2VkCiBsaXN0ICh0aG91Z2ggYW55b25lIGNhbiBwb3N0KSBhbmQgc2Vj dXJpdHkgcmVsYXRlZCBidWcgcmVwb3J0cwogYXJlIHRyZWF0ZWQgaW4gY29uZmlkZW5jZSB1bnRp bCB0aGUgaW1wYWN0IGhhcyBiZWVuIGVzdGFibGlzaGVkLgoKX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCgpDcmVkaXRzOgoK IFRoaXMgdnVsbmVyYWJpbGl0eSB3YXMgZGlzY292ZXJlZCBieSBMdWJvcyBVaGxpYXJpayBvZiBS ZWRIYXQuCgogRml4ZWQgYnkgRWR1YXJkIEJhZ2Rhc2FyeWFuIChUaGUgTWVhc3VyZW1lbnQgRmFj dG9yeSkuCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18KClJldmlzaW9uIGhpc3Rvcnk6CgogMjAxOS0wOS0zMCAxNzoxMjox OCBVVEMgSW5pdGlhbCBSZXBvcnQKIDIwMjAtMDctMjkgMjA6NTE6NTggVVRDIEZpeCBjb21taXR0 ZWQKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fCkVORApfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXwpzcXVpZC1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKc3F1aWQtYW5ub3VuY2VAbGlzdHMu c3F1aWQtY2FjaGUub3JnCmh0dHA6Ly9saXN0cy5zcXVpZC1jYWNoZS5vcmcvbGlzdGluZm8vc3F1 aWQtYW5ub3VuY2UK