CVE-2024-33427

A flaw was found in Squid. A buffer over-read in the ConfigParser::UnQuote function in the src/ConfigParser.cc file can be triggered when a specially crafted configuration file is being parsed by Squid when it's initializing, causing an application crash.

This CVE has been rejected and Red Hat Product Security does not consider this to be a vulnerability because this issue can only be triggered when Squid is initializing and by using a specially crafted configuration file. The only impact of this issue is an application crash before Squid is in fact started and running.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Do not use untrusted Squid configuration files.