[ADVISORY] SQUID-2021:3 Denial of Service issue in Cache Manager
[email protected] Tue, 11 May 2021 00:44:36 +1200
| Newsgroups | gmane.comp.web.squid.announce |
|---|---|
| Message-ID | <75dea3b7e7204af75cc3d0a960f72c18__34105.1464363531$1620651830$gmane$org@treenet.co.nz> |
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fCgpTcXVpZCBQcm94eSBDYWNoZSBTZWN1cml0eSBVcGRhdGUgQWR2aXNvcnkgU1FV SUQtMjAyMTozCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwoKQWR2aXNvcnkgSUQ6ICAgICAgIHwgU1FVSUQtMjAyMTozCkRh dGU6ICAgICAgICAgICAgICB8IE1heSAxMCwgMjAyMQpTdW1tYXJ5OiAgICAgICAgICAgfCBEZW5p YWwgb2YgU2VydmljZSBpc3N1ZSBpbiBDYWNoZSBNYW5hZ2VyCkFmZmVjdGVkIHZlcnNpb25zOiB8 IFNxdWlkIDEueCAtPiAzLjUuMjgKICAgICAgICAgICAgICAgICAgICB8IFNxdWlkIDQueCAtPiA0 LjE0CiAgICAgICAgICAgICAgICAgICAgfCBTcXVpZCA1LnggLT4gNS4wLjQKRml4ZWQgaW4gdmVy c2lvbjogIHwgU3F1aWQgNC4xNSBhbmQgNS4wLjUKX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCgogICA8aHR0cDovL2N2ZS5t aXRyZS5vcmcvY2dpLWJpbi9jdmVuYW1lLmNnaT9uYW1lPUNWRS0yMDIxLTI4NjUyPgpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18KClByb2JsZW0gRGVzY3JpcHRpb246CgogIER1ZSB0byBhbiBpbmNvcnJlY3QgcGFyc2VyIHZh bGlkYXRpb24gYnVnIFNxdWlkIGlzIHZ1bG5lcmFibGUgdG8KICBhIERlbmlhbCBvZiBTZXJ2aWNl IGF0dGFjayBhZ2FpbnN0IHRoZSBDYWNoZSBNYW5hZ2VyIEFQSS4KCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKU2V2ZXJp dHk6CgogIFRoaXMgcHJvYmxlbSBhbGxvd3MgYSB0cnVzdGVkIGNsaWVudCB0byB0cmlnZ2VyIG1l bW9yeSBsZWFrcwogIHdoaWNoIG92ZXIgdGltZSBsZWFkIHRvIGEgRGVuaWFsIG9mIFNlcnZpY2Ug YWdhaW5zdCBTcXVpZCBhbmQKICB0aGUgbWFjaGluZSBpdCBpcyBvcGVyYXRpbmcgb24uCgogIFRo aXMgYXR0YWNrIGlzIGxpbWl0ZWQgdG8gY2xpZW50cyB3aXRoIENhY2hlIE1hbmFnZXIgQVBJIGFj Y2VzcwogIHByaXZpbGVnZS4KCkNWU1MgU2NvcmUgb2YgNy44Cmh0dHBzOi8vbnZkLm5pc3QuZ292 L3Z1bG4tbWV0cmljcy9jdnNzL3YzLWNhbGN1bGF0b3I/dmVjdG9yPUFWOk4vQUM6SC9QUjpIL1VJ Ok4vUzpDL0M6Ti9JOk4vQTpIL0U6Ri9STDpPL1JDOkMvQ1I6WC9JUjpYL0FSOkgvTUFWOk4vTUFD OkgvTVBSOkgvTVVJOk4vTVM6Qy9NQzpYL01JOlgvTUE6SCZ2ZXJzaW9uPTMuMQoKX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f CgpVcGRhdGVkIFBhY2thZ2VzOgoKVGhpcyBidWcgaXMgZml4ZWQgYnkgU3F1aWQgdmVyc2lvbnMg NC4xNSBhbmQgNS4wLjYuCgogIEluIGFkZGl0aW9uLCBwYXRjaGVzIGFkZHJlc3NpbmcgdGhpcyBw cm9ibGVtIGZvciB0aGUgc3RhYmxlCiAgcmVsZWFzZXMgY2FuIGJlIGZvdW5kIGluIG91ciBwYXRj aCBhcmNoaXZlczoKClNxdWlkIDQ6CiAgCjxodHRwOi8vd3d3LnNxdWlkLWNhY2hlLm9yZy9WZXJz aW9ucy92NC9jaGFuZ2VzZXRzL3NxdWlkLTQtMDAwM2UzNTE4ZGM5NWU0YjVhYjQ2YjUxNDBhZjc5 YjIyMjUzMDQ4ZS5wYXRjaD4KClNxdWlkIDU6CiAgCjxodHRwOi8vd3d3LnNxdWlkLWNhY2hlLm9y Zy9WZXJzaW9ucy92NS9jaGFuZ2VzZXRzL3NxdWlkLTUtMmRiNzBlMDQ3MjNjZWRkMTlhOTBkYmE4 Yjg2M2NjYmMyZTcwOGY4ZS5wYXRjaD4KCiAgSWYgeW91IGFyZSB1c2luZyBhIHByZXBhY2thZ2Vk IHZlcnNpb24gb2YgU3F1aWQgdGhlbiBwbGVhc2UgcmVmZXIKICB0byB0aGUgcGFja2FnZSB2ZW5k b3IgZm9yIGF2YWlsYWJpbGl0eSBpbmZvcm1hdGlvbiBvbiB1cGRhdGVkCiAgcGFja2FnZXMuCgpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18KCkRldGVybWluaW5nIGlmIHlvdXIgdmVyc2lvbiBpcyB2dWxuZXJhYmxlOgoKICBT cXVpZCBvbGRlciB0aGFuIDMuNS4yOCBoYXZlIG5vdCBiZWVuIHRlc3RlZCBhbmQgc2hvdWxkIGJl CiAgYXNzdW1lZCB0byBiZSB2dWxuZXJhYmxlLgoKICBBbGwgU3F1aWQtNC54IHVwIHRvIGFuZCBp bmNsdWRpbmcgNC4xNCBhcmUgdnVsbmVyYWJsZS4KCiAgQWxsIFNxdWlkLTUueCB1cCB0byBhbmQg aW5jbHVkaW5nIDUuMC40IGFyZSB2dWxuZXJhYmxlLgoKX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCgpXb3JrYXJvdW5kOgoK RWl0aGVyLAoKICBEaXNhYmxlIENhY2hlIE1hbmFnZXIgYWNjZXNzIGVudGlyZWx5IGlmIG5vdCBu ZWVkZWQuCgogIFBsYWNlIHRoZSBmb2xsb3dpbmcgbGluZSBpbiBzcXVpZC5jb25mIGJlZm9yZSBs aW5lcyBjb250YWluaW5nCiAgImFsbG93IiA6CgogICAgaHR0cF9hY2Nlc3MgZGVueSBtYW5hZ2Vy CgpPciwKCiAgSGFyZGVuIENhY2hlIE1hbmFnZXIgYWNjZXNzIHByaXZpbGVnZXMuCgogIEZvciBl eGFtcGxlOyByZXF1aXJlIGF1dGhlbnRpY2F0aW9uIG9yIG90aGVyIGFjY2VzcyBjb250cm9scyBp bgogIGh0dHBfYWNjZXNzIGJleW9uZCB0aGUgZGVmYXVsdCBJUCBhZGRyZXNzIHJlc3RyaWN0aW9u LgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fCgpDb250YWN0IGRldGFpbHMgZm9yIHRoZSBTcXVpZCBwcm9qZWN0OgoKICBG b3IgaW5zdGFsbGF0aW9uIC8gdXBncmFkZSBzdXBwb3J0IG9uIGJpbmFyeSBwYWNrYWdlZCB2ZXJz aW9ucwogIG9mIFNxdWlkOiBZb3VyIGZpcnN0IHBvaW50IG9mIGNvbnRhY3Qgc2hvdWxkIGJlIHlv dXIgYmluYXJ5CiAgcGFja2FnZSB2ZW5kb3IuCgogIElmIHlvdSBpbnN0YWxsIGFuZCBidWlsZCBT cXVpZCBmcm9tIHRoZSBvcmlnaW5hbCBTcXVpZCBzb3VyY2VzCiAgdGhlbiB0aGUgPHNxdWlkLXVz ZXJzQGxpc3RzLnNxdWlkLWNhY2hlLm9yZz4gbWFpbGluZyBsaXN0IGlzIHlvdXIKICBwcmltYXJ5 IHN1cHBvcnQgcG9pbnQuIEZvciBzdWJzY3JpcHRpb24gZGV0YWlscyBzZWUKICA8aHR0cDovL3d3 dy5zcXVpZC1jYWNoZS5vcmcvU3VwcG9ydC9tYWlsaW5nLWxpc3RzLmh0bWw+LgoKICBGb3IgcmVw b3J0aW5nIG9mIG5vbi1zZWN1cml0eSBidWdzIGluIHRoZSBsYXRlc3QgU1RBQkxFIHJlbGVhc2UK ICB0aGUgc3F1aWQgYnVnemlsbGEgZGF0YWJhc2Ugc2hvdWxkIGJlIHVzZWQKICA8aHR0cDovL2J1 Z3Muc3F1aWQtY2FjaGUub3JnLz4uCgogIEZvciByZXBvcnRpbmcgb2Ygc2VjdXJpdHkgc2Vuc2l0 aXZlIGJ1Z3Mgc2VuZCBhbiBlbWFpbCB0byB0aGUKICA8c3F1aWQtYnVnc0BsaXN0cy5zcXVpZC1j YWNoZS5vcmc+IG1haWxpbmcgbGlzdC4gSXQncyBhIGNsb3NlZAogIGxpc3QgKHRob3VnaCBhbnlv bmUgY2FuIHBvc3QpIGFuZCBzZWN1cml0eSByZWxhdGVkIGJ1ZyByZXBvcnRzCiAgYXJlIHRyZWF0 ZWQgaW4gY29uZmlkZW5jZSB1bnRpbCB0aGUgaW1wYWN0IGhhcyBiZWVuIGVzdGFibGlzaGVkLgoK X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fCgpDcmVkaXRzOgoKICBUaGlzIHZ1bG5lcmFiaWxpdHkgd2FzIGRpc2NvdmVyZWQg YnkgSm9zaHVhIFJvZ2VycyBvZiBPcGVyYQogIFNvZnR3YXJlLgoKICBGaXhlZCBieSBBbW9zIEpl ZmZyaWVzIG9mIFRyZWVob3VzZSBOZXR3b3JrcyBMdGQuCgpfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KClJldmlzaW9uIGhp c3Rvcnk6CgogIDIwMjEtMDMtMDMgMTc6MDI6MjUgVVRDIEluaXRpYWwgUmVwb3J0CiAgMjAyMS0w My0xNiAwMTo1OTo0NSBVVEMgUGF0Y2ggUmVsZWFzZWQKICAyMDIxLTAzLTE3IDA2OjE5OjA5IFVU QyBDVkUgQXNzaWdubWVudApfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18KRU5ECl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fCnNxdWlkLWFubm91bmNlIG1haWxpbmcgbGlzdApzcXVpZC1h bm5vdW5jZUBsaXN0cy5zcXVpZC1jYWNoZS5vcmcKaHR0cDovL2xpc3RzLnNxdWlkLWNhY2hlLm9y Zy9saXN0aW5mby9zcXVpZC1hbm5vdW5jZQo=