This problem allows a remote client to perform Denial of Service when sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input.
This issue is triggered during access control security checks, meaning clients may not have been permitted to use the proxy yet.
FTP support is always enabled and cannot be disabled completely.
Platform | Package | Release Date | Advisory |
---|---|---|---|
Amazon Linux 2023 | squid | 2023-11-09 21:29 | ALAS2023-2023-429 |
Score Type | Score | Vector | |
---|---|---|---|
Amazon Linux | CVSSv3 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
NVD | CVSSv3 | 8.6 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |