The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:4545-1 advisory.

    - CVE-2023-46728: Remove gopher support (bsc#1216926).
    - Fixed overread in HTTP request header parsing (bsc#1217274).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-0071 advisory.

    - squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)
    - squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)
    - squid: Buffer over-read in the HTTP Message processing feature (CVE-2023-49285)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5637 advisory.

    -----BEGIN PGP SIGNED MESSAGE-----     Hash: SHA512

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5637-1                   security@debian.org     https://www.debian.org/security/                          Markus Koschany     March 08, 2024                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : squid     CVE ID         : CVE-2023-46724 CVE-2023-46846 CVE-2023-46847 CVE-2023-49285                      CVE-2023-49286 CVE-2023-50269 CVE-2024-23638 CVE-2024-25617                      CVE-2023-46848 CVE-2024-25111     Debian Bug     : 1055252 1054537 1055250 1055251 1058721

    Several security vulnerabilities have been discovered in Squid, a full featured     web proxy cache. Due to programming errors in Squid's HTTP request parsing,     remote attackers may be able to execute a denial of service attack by sending     large X-Forwarded-For header or trigger a stack buffer overflow while     performing HTTP Digest authentication. Other issues facilitate request     smuggling past a firewall or a denial of service against Squid's Helper process     management.

    In regard to CVE-2023-46728: Please note that support for the Gopher protocol     has simply been removed in future Squid versions. There are no plans by the     upstream developers of Squid to fix this issue. We recommend to reject all     Gopher URL requests instead.

    For the oldstable distribution (bullseye), these problems have been fixed     in version 4.13-10+deb11u3.

    For the stable distribution (bookworm), these problems have been fixed in     version 5.7-2+deb12u1.

    We recommend that you upgrade your squid packages.

    For the detailed security status of squid please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/squid

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmXrHBNfFIAAAAAALgAo     aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD     RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQACgkQ2a0UuVE7     UeSFng/+JAY5jG6Z/fVFf2M9SsqFhQm8mGT1CgOx39dYirUkdpcFOyADqWopwv+q     tci90QFuhnreW1DmO1GYRlZro+37iRjiryRKxETpUB1AnpPWs6RnyAA+mrqssDqg     PxxFkqpJFtpMhZU3VkDDbTkkvK2T0Hwjdn8TND6qA+B56exwW2DEZlm5aqCPiWRf     pdzPZTOZJEV2fT4UPWduiIN1l94VsLktfZY5Ox0/HmrdkAWJJFXQhj3wZPcbFLbB     leQ7Nkq6mpuw98UxOSa7hsE0crPm6ctrf7AYMx+qojtWJFcbFE+mUqzcf0aFYp0L     EfTSVAOVEXvbFytlX/oSWYE5GrZtTrnwProiXFJT7WvDYN2Mbqxgp/jB3jZygmrZ     rknvF84haHX16ZMXRlBDOlx1E3XSCB+/xRynwbGQe8RPzSRlOKuiFqn+qr3qCtOd     5Ua2+ZJXDpEP4aUseFb94FwJRfs9onBS+EYPt2xwcxcBGUiMJ/lY9Fj9p5MjQ1bZ     nCXuRNo2ao6qumLSraK2qPle7AucbuOtiMDsMFi6rGu3H0RVlk7oWGFO4rMRAcvX     IBYU2bWBIyi7J4IvJd+07QfNgofPvcld9XN7/LDgizmMZpCorpPq39Ta24y7U3e5     Zv+ye/kOYKuD0ij7M7jkT2hgxq6kKdlSEZbZ/wrlkSILrcjgwqw=     =qmZY
    -----END PGP SIGNATURE-----



Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0295 advisory.

    This advisory aggregates security fixes for the squid SRPM in CIQ LTS 8.8. It addresses 9 CVEs:
    CVE-2024-25111, CVE-2023-5824, CVE-2023-49286, CVE-2024-25617, CVE-2023-46728, and 4 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7340:01 advisory.

    squid: Denial of Service in SSL Certificate validation (CVE-2023-46724)         squid: NULL pointer dereference in the gopher protocol code (CVE-2023-46728)         squid: Buffer over-read in the HTTP Message processing feature     (CVE-2023-49285)         squid: Incorrect Check of Function Return Value In Helper Process management     (CVE-2023-49286)     CVE(s):
    CVE-2023-46724     CVE-2023-46728     CVE-2023-49285     CVE-2023-49286

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
186264	SUSE SLES12 Security Update : squid (SUSE-SU-2023:4545-1)	Nessus	SuSE Local Security Checks	2023/11/25	2026/6/25	high
187863	Oracle Linux 9 : squid (ELSA-2024-0071)	Nessus	Oracle Linux Local Security Checks	2024/1/10	2025/9/9	high
191759	Debian dsa-5637 : squid - security update	Nessus	Debian Local Security Checks	2024/3/8	2025/1/24	medium
356363	Rocky Linux 8.8 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource Multiple Vulnerabilities (ciqsa-2026_0295)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
292972	MiracleLinux 9 : squid-5.5-6.el9_3.5 (AXSA:2024-7340:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

検出

プラグインの検索

high

high

medium

high

high