Lucene search
OracleLinuxELSA-2020-4082HistoryOct 08, 2020 - 12:00 a.m.
squid security update
2020-10-0800:00:00
linux.oracle.com
39
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
[7:3.5.20-17.4]
- Resolves: #1872349 - CVE-2020-24606 squid: Improper Input Validation could
result in a DoS - Resolves: #1872327 - CVE-2020-15810 squid: HTTP Request Smuggling could
result in cache poisoning - Resolves: #1872342 - CVE-2020-15811 squid: HTTP Request Splitting could
result in cache poisoning
[7:3.5.20-17.2] - Resolves: #1802516 - CVE-2020-8449 squid: Improper input validation issues
in HTTP Request processing - Resolves: #1802515 - CVE-2020-8450 squid: Buffer overflow in a Squid acting
as reverse-proxy - Resolves: #1853129 - CVE-2020-15049 squid: request smuggling and poisoning
attack against the HTTP cache - Resolves: #1802517 - CVE-2019-12528 squid: Information Disclosure issue in
FTP Gateway
[7:3.5.20-17] - Resolves: #1828361 - CVE-2020-11945 squid: improper access restriction upon
Digest Authentication nonce replay could lead to remote code execution - Resolves: #1828362 - CVE-2019-12519 squid: improper check for new member in
ESIExpression::Evaluate allows for stack buffer overflow [rhel
[7:3.5.20-16] - Resolves: #1738582 - CVE-2019-12525 squid: parsing of header
Proxy-Authentication leads to memory corruption
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 7 | src | squid | < 3.5.20-17.el7_9.4 | squid-3.5.20-17.el7_9.4.src.rpm |
| oracle linux | 7 | aarch64 | squid | < 3.5.20-17.el7_9.4 | squid-3.5.20-17.el7_9.4.aarch64.rpm |
| oracle linux | 7 | aarch64 | squid-migration-script | < 3.5.20-17.el7_9.4 | squid-migration-script-3.5.20-17.el7_9.4.aarch64.rpm |
| oracle linux | 7 | aarch64 | squid-sysvinit | < 3.5.20-17.el7_9.4 | squid-sysvinit-3.5.20-17.el7_9.4.aarch64.rpm |
| oracle linux | 7 | src | squid | < 3.5.20-17.el7_9.4 | squid-3.5.20-17.el7_9.4.src.rpm |
| oracle linux | 7 | x86_64 | squid | < 3.5.20-17.el7_9.4 | squid-3.5.20-17.el7_9.4.x86_64.rpm |
| oracle linux | 7 | x86_64 | squid-migration-script | < 3.5.20-17.el7_9.4 | squid-migration-script-3.5.20-17.el7_9.4.x86_64.rpm |
| oracle linux | 7 | x86_64 | squid-sysvinit | < 3.5.20-17.el7_9.4 | squid-sysvinit-3.5.20-17.el7_9.4.x86_64.rpm |
Related
nessus
nessus
Scientific Linux Security Update : squid on SL7.x x86_64 (20201001)
2020-10-21 00:00:00
Oracle Linux 7 : squid (ELSA-2020-4082)
2020-10-08 00:00:00
Amazon Linux AMI : squid (ALAS-2020-1453)
2020-11-18 00:00:00
redhat
redhat
(RHSA-2020:4082) Important: squid security update
2020-09-30 00:17:14
(RHSA-2020:2040) Important: squid security update
2020-05-06 12:46:17
(RHSA-2020:2041) Important: squid:4 security update
2020-05-06 12:52:10
amazon
amazon
Important: squid
2020-11-16 17:59:00
Important: squid
2020-10-22 18:42:00
Important: squid
2020-06-26 22:56:00
centos
centos
squid security update
2020-11-06 22:15:00
squid security update
2020-05-21 14:55:03
oraclelinux
oraclelinux
squid:4 security update
2020-09-04 00:00:00
squid security update
2020-05-07 00:00:00
squid:4 security update
2020-05-12 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:2442-1)
2021-04-19 00:00:00
Debian: Security Advisory (DLA-2394-1)
2020-10-03 00:00:00
Ubuntu: Security Advisory (USN-4551-1)
2020-09-29 00:00:00
suse
suse
Security update for squid (critical)
2020-09-07 00:00:00
Security update for squid (critical)
2020-09-05 00:00:00
Security update for squid (moderate)
2020-03-06 00:00:00
debian
debian
[SECURITY] [DLA 2394-1] squid3 security update
2020-10-02 16:29:55
[SECURITY] [DSA 4751-1] squid security update
2020-08-27 13:05:31
[SECURITY] [DSA 4751-1] squid security update
2020-08-27 13:05:31
osv
osv
squid3 vulnerabilities
2020-09-28 16:41:05
squid3 - security update
2020-10-02 00:00:00
squid - security update
2020-08-27 00:00:00
ubuntu
ubuntu
Squid vulnerabilities
2020-09-28 00:00:00
Squid vulnerabilities
2020-08-27 00:00:00
Squid vulnerabilities
2020-02-20 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: squid-4.11-1.fc32
2020-05-16 03:40:02
[SECURITY] Fedora 32 Update: squid-4.13-1.fc32
2020-09-03 16:40:44
[SECURITY] Fedora 33 Update: squid-4.13-1.fc33
2020-09-25 17:06:35
rocky
rocky
squid:4 security update
2020-05-06 12:52:10
squid:4 security update
2020-09-03 12:36:52
almalinux
almalinux
Important: squid:4 security update
2020-05-06 12:52:10
mageia
mageia
Updated squid packages fix security vulnerabilities
2020-09-04 12:16:18
Updated squid packages fix security vulnerabilities
2020-02-26 13:21:01
freebsd
freebsd
Squid -- multiple vulnerabilities
2020-02-10 00:00:00
cloudlinux
cloudlinux
ubuntucve
ubuntucve
gentoo
gentoo
Squid: Multiple vulnerabilities
2020-05-12 00:00:00
Squid: Multiple vulnerabilities
2020-03-16 00:00:00
hackerone
hackerone
Internet Bug Bounty: HTTP Smuggling multiple issues in Squid 3.x & squid 4.x
2019-12-14 11:11:17
Internet Bug Bounty: Squid leaks previous content from reusable buffer
2020-03-18 22:01:47
prion
prion
Design/Logic Flaw
2020-08-24 18:15:00
Stack overflow
2020-04-15 20:15:00
Design/Logic Flaw
2020-06-30 18:15:00
alpinelinux
alpinelinux
debiancve
debiancve
veracode
veracode
HTTP Request Smuggling
2020-09-29 03:37:17
Denial Of Service (DoS)
2020-05-07 02:01:35
cve
cve
CVE-2019-12519
2020-04-15 20:15:00
CVE-2020-15049
2020-06-30 18:15:00
redhatcve
redhatcve
CVE-2020-15049
2020-06-30 17:20:46
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for ELSA-2020-4082