DeutschShown in its original language — a full translation is planned for a future version.
Squid: Mehrere Schwachstellen ermöglichen Umgehung von Sicherheitsvorkehrungen
view advisory published 2019-11-10
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-18677US | medium6.1 | — | ||
An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended characters do not properly interact with hostname length restr… | ||||
| CVE-2019-18676US | high7.5 | — | ||
An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clien… | ||||
| CVE-2019-12523US | critical9.1 | — | ||
An issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP request is made. This HTTP request doesn't go through the access checks that incoming… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2019:2975-1 vom 2019-11-14external
- Squid Proxy Cache Security Update Advisory SQUID-2019:8 vom 2019-11-10external
- Squid Proxy Cache Security Update Advisory SQUID-2019:9 vom 2019-11-10external
- Red Hat Security Advisory RHSA-2020:4743 vom 2020-11-04external
- Amazon Linux Security Advisory ALAS2-2023-2065 vom 2023-06-05external
- Amazon Linux Security Advisory ALAS2-2023-2318 vom 2023-10-27external
- Amazon Linux Security Advisory ALASSQUID4-2023-007 vom 2023-09-27external
- Amazon Linux Security Advisory ALAS-2023-1757 vom 2023-06-06external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan