Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
oraclelinuxOracleLinuxELSA-2020-2041
HistoryMay 12, 2020 - 12:00 a.m.

squid:4 security update

2020-05-1200:00:00
linux.oracle.com
18

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

squid
[7:4.4-8.1]

  • Resolves: #1828368 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow
  • Resolves: #1828367 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  • Resolves: #1829402 - CVE-2019-12525 squid:4/squid: parsing of header
    Proxy-Authentication leads to memory corruption
OSVersionArchitecturePackageVersionFilename
oracle linux8srclibecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.1.0+5405+03b963f4.src.rpm
oracle linux8srcsquid< 4.4-8.modulesquid-4.4-8.module+el8.2.0+7611+d512f060.1.src.rpm
oracle linux8aarch64libecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.1.0+5405+03b963f4.aarch64.rpm
oracle linux8aarch64libecap-devel< 1.0.1-2.modulelibecap-devel-1.0.1-2.module+el8.1.0+5405+03b963f4.aarch64.rpm
oracle linux8aarch64squid< 4.4-8.modulesquid-4.4-8.module+el8.2.0+7611+d512f060.1.aarch64.rpm
oracle linux8srclibecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.1.0+5405+03b963f4.src.rpm
oracle linux8srcsquid< 4.4-8.modulesquid-4.4-8.module+el8.2.0+7611+d512f060.1.src.rpm
oracle linux8x86_64libecap< 1.0.1-2.modulelibecap-1.0.1-2.module+el8.1.0+5405+03b963f4.x86_64.rpm
oracle linux8x86_64libecap-devel< 1.0.1-2.modulelibecap-devel-1.0.1-2.module+el8.1.0+5405+03b963f4.x86_64.rpm
oracle linux8x86_64squid< 4.4-8.modulesquid-4.4-8.module+el8.2.0+7611+d512f060.1.x86_64.rpm

Related

nessus 45
redhat 4
centos 1
oraclelinux 3
osv 9
openvas 34
almalinux 1
rocky 1
amazon 3
gentoo 1
ubuntu 3
debiancve 3
prion 3
cve 3
veracode 3
redhatcve 3
alpinelinux 3
ubuntucve 3
mageia 3
fedora 4
suse 3
debian 5
altlinux 2
cloudlinux 1
nessus
nessus
CentOS 7 : squid (CESA-2020:2040)
2020-05-22 00:00:00
Scientific Linux Security Update : squid on SL7.x x86_64 (20200506)
2020-05-07 00:00:00
Oracle Linux 8 : squid:4 (ELSA-2020-2041)
2020-08-13 00:00:00
redhat
redhat
(RHSA-2020:2040) Important: squid security update
2020-05-06 12:46:17
(RHSA-2020:2041) Important: squid:4 security update
2020-05-06 12:52:10
(RHSA-2020:2038) Important: squid:4 security update
2020-05-06 11:55:10
centos
centos
squid security update
2020-05-21 14:55:03
oraclelinux
oraclelinux
squid security update
2020-05-07 00:00:00
squid:4 security update
2020-09-04 00:00:00
squid security update
2020-10-08 00:00:00
osv
osv
Important: squid:4 security update
2020-05-06 12:52:10
Important: squid:4 security update
2020-05-06 12:52:10
CVE-2019-12525
2019-07-11 19:15:13
openvas
openvas
CentOS: Security Advisory for squid (CESA-2020:2040)
2020-05-22 00:00:00
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-1828)
2020-07-31 00:00:00
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-1931)
2020-09-04 00:00:00
almalinux
almalinux
Important: squid:4 security update
2020-05-06 12:52:10
rocky
rocky
squid:4 security update
2020-05-06 12:52:10
amazon
amazon
Important: squid
2020-06-23 06:08:00
Important: squid
2020-06-01 12:25:00
Important: squid
2020-06-26 22:56:00
gentoo
gentoo
Squid: Multiple vulnerabilities
2020-05-12 00:00:00
ubuntu
ubuntu
Squid vulnerabilities
2020-05-13 00:00:00
Squid vulnerabilities
2019-07-22 00:00:00
Squid vulnerabilities
2019-07-18 00:00:00
debiancve
debiancve
CVE-2019-12525
2019-07-11 19:15:00
CVE-2019-12519
2020-04-15 20:15:00
CVE-2020-11945
2020-04-23 15:15:00
prion
prion
Stack overflow
2020-04-15 20:15:00
Authentication flaw
2019-07-11 19:15:00
Design/Logic Flaw
2020-04-23 15:15:00
cve
cve
CVE-2019-12519
2020-04-15 20:15:00
CVE-2019-12525
2019-07-11 19:15:00
CVE-2020-11945
2020-04-23 15:15:00
veracode
veracode
Denial Of Service (DoS)
2020-05-07 02:01:36
Denial Of Service (DoS)
2020-05-07 02:01:35
Remote Code Execution (RCE)
2020-05-07 02:01:36
redhatcve
redhatcve
CVE-2019-12519
2020-04-24 08:03:41
CVE-2019-12525
2020-04-03 01:59:08
CVE-2020-11945
2020-04-24 08:33:53
alpinelinux
alpinelinux
CVE-2020-11945
2020-04-23 15:15:00
CVE-2019-12525
2019-07-11 19:15:00
CVE-2019-12519
2020-04-15 20:15:00
ubuntucve
ubuntucve
CVE-2019-12519
2020-04-15 00:00:00
CVE-2020-11945
2020-04-23 00:00:00
CVE-2019-12525
2019-07-11 00:00:00
mageia
mageia
Updated squid packages fix security vulnerability
2020-05-05 15:20:37
Updated squid packages fix security vulnerabilities
2019-09-12 22:09:52
Updated squid packages fix security vulnerabilities
2019-09-12 22:09:52
fedora
fedora
[SECURITY] Fedora 31 Update: squid-4.11-1.fc31
2020-05-16 03:11:17
[SECURITY] Fedora 30 Update: squid-4.11-1.fc30
2020-05-16 04:21:08
[SECURITY] Fedora 32 Update: squid-4.11-1.fc32
2020-05-16 03:40:02
suse
suse
Security update for squid (important)
2020-05-11 00:00:00
Security update for squid (important)
2019-11-21 00:00:00
Security update for squid (important)
2019-11-21 00:00:00
debian
debian
[SECURITY] [DLA 1858-1] squid3 security update
2019-07-20 23:09:33
[SECURITY] [DLA 2278-1] squid3 security update
2020-07-10 21:55:24
[SECURITY] [DSA 4507-1] squid security update
2019-08-24 11:46:36
altlinux
altlinux
Security fix for the ALT Linux 9 package squid version 4.8-alt1
2019-07-16 00:00:00
Security fix for the ALT Linux 8 package squid version 3.5.28-alt1
2019-08-27 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2020-8517, CVE-2021-28651, CVE-2020-15049, CVE-2020-8449, CVE-2020-8450, CVE-2020-24606, CVE-2020-25097, CVE-2020-11945, CVE-2020-14058
2021-09-21 22:10:21

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON
Related for ELSA-2020-2041
nessus45redhat4centos1oraclelinux3osv9openvas34almalinux1rocky1amazon3gentoo1ubuntu3debiancve3prion3cve3veracode3redhatcve3alpinelinux3ubuntucve3mageia3fedora4suse3debian5altlinux2cloudlinux1