CVE-2018-1000024

The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling vulnerability in ESI Response Processing that can result in Denial of Service for all clients using the proxy.. This attack appear to be exploitable via Remote server delivers an HTTP response payload containing valid but unusual ESI syntax.. This vulnerability appears to have been fixed in 4.0.23 and later.

• http://www.squid-cache.org/Advisories/SQUID-2018_1.txtPatch, Vendor Advisory
• http://www.squid-cache.org/Versions/Release Notes, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/02/msg00001.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3557-1/Third Party Advisory
• https://usn.ubuntu.com/4059-2/
• https://www.debian.org/security/2018/dsa-4122Third Party Advisory
• http://www.squid-cache.org/Advisories/SQUID-2018_1.txtPatch, Vendor Advisory
• http://www.squid-cache.org/Versions/Release Notes, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/02/msg00001.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3557-1/Third Party Advisory
• https://usn.ubuntu.com/4059-2/
• https://www.debian.org/security/2018/dsa-4122Third Party Advisory

Published

Feb 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000018An information disclosure in ovirt-hosted-engine-setup prior…
• CVE-2018-1000019OpenEMR version 5.0.0 contains a OS Command Injection vulner…
• CVE-2018-1000020OpenEMR version 5.0.0 contains a Cross Site Scripting (XSS) …
• CVE-2018-1000021GIT version 2.15.1 and earlier contains a Input Validation E…5
• CVE-2018-1000022Electrum Technologies GmbH Electrum Bitcoin Wallet version p…
• CVE-2018-1000023Bitpay/insight-api Insight-api version 5.0.0 and earlier con…
• CVE-2018-1000025Jerome Gamez Firebase Admin SDK for PHP version from 3.2.0 t…
• CVE-2018-1000026Linux Linux kernel version at least v4.8 onwards, probably w…7.7
• CVE-2018-1000027The Squid Software Foundation Squid HTTP Caching Proxy versi…
• CVE-2018-1000028Linux kernel version after commit bdcf0a423ea1 - 4.15-rc4+, …
• CVE-2018-1000029mcholste Enterprise Log Search and Archive (ELSA) version re…
• CVE-2018-1000030Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as wel…3.6