Here's the page we think you wanted. See search results instead:

Squid Proxy ESI and OpenSSL Configuration Denial of Service

Strike ID:
E18-0jw41
CVSS:
5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
False Positive:
f
Variants:
1
Year:
2018

Description

This strike exploits a code execution vulnerability in Squid Proxy. The vulnerability is due to improper handling of objects in memory within the ESI and OpenSSL functionalities of the server. By sending a crafted ESI responses to the target server, the attacker can cause denial-of-service conditions on the target proxy service.

CVE

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1172

References

http://www.squid-cache.org/Advisories/SQUID-2018_3.txt

Metasploit

http://www.zerodayinitiative.com/advisories/ZDI-18-309

Zdi

18-309