4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
65.2%
Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka “Nonce replay vulnerability.”
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | squid | < 5.7-2 | squid_5.7-2_all.deb |
Debian | 11 | all | squid | < 4.13-10+deb11u2 | squid_4.13-10+deb11u2_all.deb |
Debian | 10 | all | squid | < 4.6-1+deb10u7 | squid_4.6-1+deb10u7_all.deb |
Debian | 999 | all | squid | < 6.9-1 | squid_6.9-1_all.deb |
Debian | 13 | all | squid | < 6.6-1 | squid_6.6-1_all.deb |