DeutschShown in its original language — a full translation is planned for a future version.
Squid: Mehrere Schwachstellen
view advisory published 2020-08-23
Ein entfernter, anonymer oder authentiiserter Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren oder Sicherheitsmechanismen zu umgehen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-15811US | medium6.5 | — | ||
An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Splitting attacks may succeed against HTTP and HTTPS traffic. This… | ||||
| CVE-2020-15810US | medium6.5 | — | ||
An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Smuggling attacks may succeed against HTTP and HTTPS traffic. This… | ||||
| CVE-2020-24606US | high7.5 | — | ||
Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response m… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2020:2442-1 vom 2020-09-02external
- SUSE Security Update SUSE-SU-2020:2443-1 vom 2020-09-02external
- SUSE Security Update SUSE-SU-2020:2471-1 vom 2020-09-03external
- Red Hat Security Advisory RHSA-2020:3623 vom 2020-09-03external
- Red Hat Security Advisory RHSA-2020:4082 vom 2020-09-30external
- Red Hat Security Advisory RHSA-2020:4743 vom 2020-11-04external
- Amazon Linux Security Advisory ALASSQUID4-2023-006 vom 2023-09-27external
- Advisory SQUID-2020:10 vom 2020-08-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan