NIXPKGS-2025-0021
published on 29 Oct 2025
by @Erethon Activity log
- Created automatic suggestion
- @Erethon accepted
- @Erethon published on GitHub
Squid: denial of service in http digest authentication
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
Affected products
squid
- ==6.4
- *
- <6.4
squid34
- *
squid:4
- *
Matching in nixpkgs
pkgs.squid
Caching proxy for the Web supporting HTTP, HTTPS, FTP, and more
-
nixos-25.05 -
- nixos-25.05-small 7.0.1
Package maintainers
-
@srhb Sarah Brofeldt <sbrofeldt@gmail.com>
-
@happysalada Raphael Megzari <raphael@megzari.com>
-
@7c6f434c Michael Raskin <7c6f434c@mail.ru>