Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2020:1068
HistoryApr 08, 2020 - 7:21 p.m.

squid security update

2020-04-0819:21:41
CentOS Project
lists.centos.org
77

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.949 High

EPSS

Percentile

99.3%

JSON

CentOS Errata and Security Advisory CESA-2020:1068

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: Incorrect pointer handling when processing ESI Responses can lead to denial of service (CVE-2018-1000024)

  • squid: Incorrect pointer handling in HTTP processing and certificate download can lead to denial of service (CVE-2018-1000027)

  • squid: XSS via user_name or auth parameter in cachemgr.cgi (CVE-2019-13345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes linked from the References section.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-cr-announce/2020-April/032681.html

Affected packages:
squid
squid-migration-script
squid-sysvinit

Upstream details at:
https://access.redhat.com/errata/RHSA-2020:1068

Related

nessus 42
oraclelinux 2
openvas 35
redhat 2
ubuntu 4
freebsd 1
debian 8
amazon 3
fedora 4
osv 12
altlinux 2
redhatcve 3
debiancve 3
prion 3
veracode 2
ubuntucve 3
cve 3
almalinux 1
alpinelinux 3
checkpoint_advisories 2
suse 3
rocky 1
mageia 2
nessus
nessus
RHEL 7 : squid (RHSA-2020:1068)
2020-04-01 00:00:00
CentOS 7 : squid (CESA-2020:1068)
2020-04-10 00:00:00
Oracle Linux 7 : squid (ELSA-2020-1068)
2023-09-07 00:00:00
oraclelinux
oraclelinux
squid security and bug fix update
2020-04-06 00:00:00
squid:4 security and bug fix update
2019-11-14 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4059-2)
2022-08-26 00:00:00
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2018-1075)
2020-01-23 00:00:00
Debian: Security Advisory (DLA-1266-1)
2018-02-20 00:00:00
redhat
redhat
(RHSA-2020:1068) Moderate: squid security and bug fix update
2020-03-31 09:14:49
(RHSA-2019:3476) Moderate: squid:4 security and bug fix update
2019-11-05 17:50:00
ubuntu
ubuntu
Squid vulnerabilities
2019-07-17 00:00:00
Squid vulnerabilities
2018-02-05 00:00:00
Squid regression
2022-12-12 00:00:00
freebsd
freebsd
squid -- Vulnerable to Denial of Service attack
2017-12-13 00:00:00
debian
debian
[SECURITY] [DLA 1266-1] squid3 security update
2018-02-02 14:42:06
[SECURITY] [DSA 4122-1] squid3 security update
2018-02-22 23:45:07
[SECURITY] [DSA 4122-1] squid3 security update
2018-02-22 23:45:07
amazon
amazon
Medium: squid
2018-09-19 17:10:00
Important: squid
2020-06-23 06:08:00
Important: squid
2020-06-26 22:56:00
fedora
fedora
[SECURITY] Fedora 27 Update: squid-4.0.23-2.fc27
2018-02-06 15:38:05
[SECURITY] Fedora 30 Update: squid-4.8-1.fc30
2019-07-30 01:15:20
[SECURITY] Fedora 29 Update: squid-4.8-2.fc29
2019-08-14 01:42:54
osv
osv
squid3 - security update
2018-02-02 00:00:00
squid3 - security update
2018-02-23 00:00:00
squid3 - security update
2019-07-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package squid version 3.5.28-alt1
2019-08-27 00:00:00
Security fix for the ALT Linux 9 package squid version 4.8-alt1
2019-07-16 00:00:00
redhatcve
redhatcve
CVE-2018-1000024
2020-03-05 07:33:58
CVE-2019-13345
2019-07-08 06:22:05
CVE-2018-1000027
2018-01-29 15:20:19
debiancve
debiancve
CVE-2018-1000024
2018-02-09 23:29:00
CVE-2018-1000027
2018-02-09 23:29:00
CVE-2019-13345
2019-07-05 16:15:00
prion
prion
Design/Logic Flaw
2018-02-09 23:29:00
Design/Logic Flaw
2019-07-05 16:15:00
Null pointer dereference
2018-02-09 23:29:00
veracode
veracode
Denial Of Service (DoS)
2020-04-01 00:38:29
Denial Of Service (DoS)
2020-04-01 00:38:30
ubuntucve
ubuntucve
CVE-2018-1000024
2018-01-29 00:00:00
CVE-2019-13345
2019-07-05 00:00:00
CVE-2018-1000027
2018-01-29 00:00:00
cve
cve
CVE-2019-13345
2019-07-05 16:15:00
CVE-2018-1000024
2018-02-09 23:29:00
CVE-2018-1000027
2018-02-09 23:29:00
almalinux
almalinux
Moderate: squid:4 security and bug fix update
2019-11-05 17:50:00
alpinelinux
alpinelinux
CVE-2019-13345
2019-07-05 16:15:00
CVE-2018-1000024
2018-02-09 23:29:00
CVE-2018-1000027
2018-02-09 23:29:00
checkpoint_advisories
checkpoint_advisories
Squid Proxy Reflected Cross-Site Scripting (CVE-2019-13345)
2020-02-25 00:00:00
Squid Proxy Denial of Service (CVE-2018-1172; CVE-2018-1000027)
2018-05-27 00:00:00
suse
suse
Security update for squid (moderate)
2019-08-20 00:00:00
Security update for squid (important)
2019-11-21 00:00:00
Security update for squid (important)
2019-11-21 00:00:00
rocky
rocky
squid:4 security and bug fix update
2019-11-05 17:50:00
mageia
mageia
Updated squid packages fix security vulnerabilities
2019-09-12 22:09:52
Updated squid packages fix security vulnerabilities
2019-09-12 22:09:52

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.949 High

EPSS

Percentile

99.3%

JSON
Related for CESA-2020:1068
nessus42oraclelinux2openvas35redhat2ubuntu4freebsd1debian8amazon3fedora4osv12altlinux2redhatcve3debiancve3prion3veracode2ubuntucve3cve3almalinux1alpinelinux3checkpoint_advisories2suse3rocky1mageia2