Lucene search

CVE-2020-15811

🗓️ 02 Sep 2020 17:11:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 243 Views🌐 2 Media mentions

An issue discovered in Squid before 4.13 and 5.x before 5.0.4 allows HTTP Request Splitting attacks, leading to cache poisoning

Reporter	Title	Published	Views	Family All 93
OSV	CVE-2020-15811	2 Sep 202017:15	–	osv
OSV	Important: squid:4 security update	3 Sep 202012:36	–	osv
OSV	Red Hat Security Advisory: squid:4 security update	16 Sep 202404:41	–	osv
OSV	squid - security update	27 Aug 202000:00	–	osv
OSV	squid3 - security update	2 Oct 202000:00	–	osv
OSV	squid3 vulnerabilities	28 Sep 202016:41	–	osv
OSV	Red Hat Security Advisory: squid security update	16 Sep 202404:42	–	osv
OSV	squid-4.16-1.5 on GA media	15 Jun 202400:00	–	osv
Prion	Design/Logic Flaw	2 Sep 202017:15	–	prion
Cvelist	CVE-2020-15811	2 Sep 202016:35	–	cvelist

Nvd

Node

squid-cache squidRange<4.13

squid-cache squidRange5.0–5.0.4

Node

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch20.04lts

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

fedoraproject fedoraMatch31

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

Node

opensuse leapMatch15.1

opensuse leapMatch15.2

Source	Link
usn	www.usn.ubuntu.com/4477-1/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BMTFLVB7GLRF2CKGFPZ4G4R5DIIPHWI3/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BE6FKUN7IGTIR2MEEMWYDT7N5EJJLZI2/
usn	www.usn.ubuntu.com/4551-1/
security	www.security.netapp.com/advisory/ntap-20210226-0007/
lists	www.lists.debian.org/debian-lts-announce/2020/10/msg00005.html
github	www.github.com/squid-cache/squid/security/advisories/GHSA-c7p8-xqhm-49wv
lists	www.lists.opensuse.org/opensuse-security-announce/2020-09/msg00017.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HJJDI7JQFGQLVNCKMVY64LAFMKERAOK7/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-09/msg00012.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Sep 2020 17:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS24.0

CVSS36.5

EPSS0.002

CWE-697