CVE:CVE-2021-31807
CNNVD:CNNVD-202105-540
Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。
Squid 存在输入验证错误漏洞。该漏洞源于程序不正确的内存管理错误，攻击者可利用该漏洞造成拒绝服务。以下产品及版本存在该漏洞：Squid 4.14版本及之前、Squid 5.0.5版本及之前。
solution:Upgrade squid-cache squid to a higher version than 4.15,5.0.6,2.5.stable2,2.5.stable3,2.5.stable4,2.5.stable5,2.5.stable6,2.5.stable7,2.5.stable8,2.5.stable9,2.5.stable10,2.5.stable11,2.5.stable12,2.5.stable13,2.5.stable14,2.6,2.7,2.7:stable2,2.7:stable3,2.7:stable4,2.7:stable5,2.7:stable6,2.7:stable7,2.7:stable8,2.7:stable9,and avoid the version [3.0,4.15),[5.0,5.0.6),2.5.stable2,2.5.stable3,2.5.stable4,2.5.stable5,2.5.stable6,2.5.stable7,2.5.stable8,2.5.stable9,2.5.stable10,2.5.stable11,2.5.stable12,2.5.stable13,2.5.stable14,2.6,2.7,2.7:stable2,2.7:stable3,2.7:stable4,2.7:stable5,2.7:stable6,2.7:stable7,2.7:stable8,2.7:stable9; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade netapp cloud_manager to a higher version than -