DeutschShown in its original language — a full translation is planned for a future version.
Squid: Mehrere Schwachstellen
view advisory published 2020-04-19
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Informationen offenzulegen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-12520US | high7.5 | — | ||
An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can serve up a response. It does this by making a MD5 hash of the… | ||||
| CVE-2019-12524US | critical9.8OT elevated | — | ||
An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the request should be denied. Squid by default comes with rules to… | ||||
02
references
External citations — patches, advisories, analysis.
- Squid Security Update Advisory SQUID-2019:4 vom 2020-04-19external
- Red Hat Security Advisory RHSA-2020:4743 vom 2020-11-04external
- Amazon Linux Security Advisory ALAS2-2023-2318 vom 2023-10-27external
- Amazon Linux Security Advisory ALASSQUID4-2023-009 vom 2023-09-27external
- Amazon Linux Security Advisory ALASSQUID4-2023-010 vom 2023-10-06external
- Oracle Linux Security Advisory ELSA-2022-22254 vom 2022-09-30external
- Debian Security Advisory DLA-2278 vom 2020-07-11external
- Ubuntu Security Notice USN-4446-1 vom 2020-08-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan