CVE-2020-14059

mediumpriority · track · 28EPSS 0.044 · 91 %ileDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

4.41% (91st) EPSS

CVSS 4 · medium

Is it mine?

41 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list.

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.04mediumAV:N/AC:L/Au:S/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 8 · impact 2.9

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 3.6

v3.16.3mediumAV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-662USprimaryCWE-662US

affected products (41)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
n/a n/a≤ n/aenisa_euvdEU
Novell Inc. HPE Helion Openstack≤ 8fstec_bduRU
Novell Inc. OpenSUSE Leap≤ 15.1fstec_bduRU
Novell Inc. OpenSUSE Leap≤ 15.2fstec_bduRU
Novell Inc. SUSE Enterprise Storage≤ 5fstec_bduRU
Novell Inc. SUSE Linux Enterprise High Performance Computing≤ 15-LTSSfstec_bduRU
Novell Inc. SUSE Linux Enterprise High Performance Computing≤ 15-ESPOSfstec_bduRU
Novell Inc. SUSE Linux Enterprise Module for Server Applications≤ 15 SP2fstec_bduRU
Novell Inc. SUSE Linux Enterprise Module for Server Applications≤ 15 SP1fstec_bduRU
Novell Inc. SUSE Linux Enterprise Point of Sale≤ 12 SP2-CLIENTfstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP3-ESPOSfstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP3-LTSSfstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP3-BCLfstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP2fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP2-BCLfstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP2-ESPOSfstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP2-LTSSfstec_bduRU

showing 20 of 41

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2023-1360Squid: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2020-06-21csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Squid ausnutzen, um einen Denial of Service Angriff durchzuführen.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund NVD CVE.org MITRE

published 2020-06-30modified 2026-06-17

related (263)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2020-7457US	high8.1	33.1% (98th)	Exploit	2020-07-09
In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchronization in the IPV6_…
CVE-2023-0045US	high7.5	2.40% (84th)	Exploit	2023-04-25
The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set function updates the Thread Information Flags (TIFs) for th…
CVE-2018-15555US	critical9.8	2.97% (87th)	—	2019-06-28
On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onboard UART headers.
CVE-2024-32644US	critical9.1	0.94% (61st)	—	2024-04-19
Evmos is a scalable, high-throughput Proof-of-Stake EVM blockchain that is fully compatible and interoperable with Ethereum. Prior to 17.0.0, there is a way to mint arbitrary token…
CVE-2022-23005US	high8.7	0.81% (57th)	—	2023-01-23
Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM co…

+258 more

references (10)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan