Lucene search

CVE-2020-15810

🗓️ 02 Sep 2020 17:11:15Reported by [email protected]Type

An issue in Squid 4.13 & 5.x allows HTTP Request Smuggling attacks, leading to cache poisoning & bypass of local security

Reporter	Title	Published	Views	Family All 94
Cvelist	CVE-2020-15810	2 Sep 202016:34	–	cvelist
RedhatCVE	CVE-2020-15810	24 Aug 202005:04	–	redhatcve
OSV	CVE-2020-15810	2 Sep 202017:15	–	osv
OSV	Important: squid:4 security update	3 Sep 202012:36	–	osv
OSV	Red Hat Security Advisory: squid:4 security update	16 Sep 202404:41	–	osv
OSV	squid - security update	27 Aug 202000:00	–	osv
OSV	squid3 - security update	2 Oct 202000:00	–	osv
OSV	squid3 vulnerabilities	28 Sep 202016:41	–	osv
OSV	Red Hat Security Advisory: squid security update	16 Sep 202404:42	–	osv
OSV	squid-4.16-1.5 on GA media	15 Jun 202400:00	–	osv

Nvd

Node

squid-cache squidRange<4.13

squid-cache squidRange5.0–5.0.4

Node

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch20.04lts

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

fedoraproject fedoraMatch31

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

Node

opensuse leapMatch15.1

opensuse leapMatch15.2

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BE6FKUN7IGTIR2MEEMWYDT7N5EJJLZI2/
security	www.security.netapp.com/advisory/ntap-20210226-0007/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BMTFLVB7GLRF2CKGFPZ4G4R5DIIPHWI3/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-09/msg00017.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-09/msg00012.html
security	www.security.netapp.com/advisory/ntap-20210226-0006/
github	www.github.com/squid-cache/squid/security/advisories/GHSA-3365-q9qx-f98m
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HJJDI7JQFGQLVNCKMVY64LAFMKERAOK7/
security	www.security.netapp.com/advisory/ntap-20210219-0007/
usn	www.usn.ubuntu.com/4477-1/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Sep 2020 17:15Current

7.2High risk

Vulners AI Score7.2

CVSS23.5

CVSS36.5

EPSS0.002

CWE-444