Lucene search

K
oraclelinuxOracleLinuxELSA-2020-4082
HistoryOct 08, 2020 - 12:00 a.m.

squid security update

2020-10-0800:00:00
linux.oracle.com
44

0.919 High

EPSS

Percentile

98.9%

[7:3.5.20-17.4]

  • Resolves: #1872349 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  • Resolves: #1872327 - CVE-2020-15810 squid: HTTP Request Smuggling could
    result in cache poisoning
  • Resolves: #1872342 - CVE-2020-15811 squid: HTTP Request Splitting could
    result in cache poisoning
    [7:3.5.20-17.2]
  • Resolves: #1802516 - CVE-2020-8449 squid: Improper input validation issues
    in HTTP Request processing
  • Resolves: #1802515 - CVE-2020-8450 squid: Buffer overflow in a Squid acting
    as reverse-proxy
  • Resolves: #1853129 - CVE-2020-15049 squid: request smuggling and poisoning
    attack against the HTTP cache
  • Resolves: #1802517 - CVE-2019-12528 squid: Information Disclosure issue in
    FTP Gateway
    [7:3.5.20-17]
  • Resolves: #1828361 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  • Resolves: #1828362 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow [rhel
    [7:3.5.20-16]
  • Resolves: #1738582 - CVE-2019-12525 squid: parsing of header
    Proxy-Authentication leads to memory corruption