Squid mishandles HTTP Transfer-Encoding headers, enabling request smuggling (USN-8998-1)
Original title: USN-8998-1: Squid vulnerability
Squid incorrectly handles certain HTTP Transfer-Encoding headers, allowing HTTP request smuggling, bypassing security mechanisms, or poisoning web caches.
It was discovered that Squid incorrectly handled certain HTTP Transfer-Encoding headers. An attacker could possibly use this issue to perform HTTP request smuggling attacks, bypass security mechanisms, or poison web caches.
- HTTP request smuggling
- bypass security mechanisms
- poison web caches
Impact: HTTP request smuggling, bypassing security mechanisms, or poisoning web caches
- Vendors
- Squid
From the original article
It was discovered that Squid incorrectly handled certain HTTP Transfer- Encoding headers. An attacker could possibly use this issue to perform HTTP request smuggling attacks, bypass security mechanisms, or poison web caches.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.