DeutschShown in its original language — a full translation is planned for a future version.
Squid: Mehrere Schwachstellen
view advisory published 2019-07-14
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder einen Denial of Service Angriff durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-12854US | high7.5 | — | ||
Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to… | ||||
| CVE-2019-12529US | medium5.9 | — | ||
An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization hea… | ||||
| CVE-2019-12527US | high8.8 | — | ||
An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does n… | ||||
| CVE-2019-12525US | critical9.8 | — | ||
An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authentication, it parses the header Proxy-Authorization. It searc… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2020:2040 vom 2020-05-21external
- Oracle Linux Security Advisory ELSA-2019-2593 vom 2019-09-04external
- SUSE Security Update SUSE-SU-2019:2975-1 vom 2019-11-14external
- Squid Proxy Cache Security Update Advisory SQUID-2019:1 vom 2019-07-13external
- Squid Proxy Cache Security Update Advisory SQUID-2019:2 vom 2019-07-13external
- Squid Proxy Cache Security Update Advisory SQUID-2019:3 vom 2019-07-13external
- Squid Proxy Cache Security Update Advisory SQUID-2019:5 vom 2019-07-13external
- Red Hat Security Advisory RHSA-2019:2593 vom 2019-09-02external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan