Lucene search
OracleLinuxELSA-2021-1135HistoryApr 09, 2021 - 12:00 a.m.
squid security update
2021-04-0900:00:00
linux.oracle.com
72
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
[7:3.5.20-17.6]
- Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow
a trusted client to perform HTTP Request Smuggling
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 7 | src | squid | < 3.5.20-17.el7_9.6 | squid-3.5.20-17.el7_9.6.src.rpm |
| oracle linux | 7 | aarch64 | squid | < 3.5.20-17.el7_9.6 | squid-3.5.20-17.el7_9.6.aarch64.rpm |
| oracle linux | 7 | aarch64 | squid-migration-script | < 3.5.20-17.el7_9.6 | squid-migration-script-3.5.20-17.el7_9.6.aarch64.rpm |
| oracle linux | 7 | aarch64 | squid-sysvinit | < 3.5.20-17.el7_9.6 | squid-sysvinit-3.5.20-17.el7_9.6.aarch64.rpm |
| oracle linux | 7 | src | squid | < 3.5.20-17.el7_9.6 | squid-3.5.20-17.el7_9.6.src.rpm |
| oracle linux | 7 | x86_64 | squid | < 3.5.20-17.el7_9.6 | squid-3.5.20-17.el7_9.6.x86_64.rpm |
| oracle linux | 7 | x86_64 | squid-migration-script | < 3.5.20-17.el7_9.6 | squid-migration-script-3.5.20-17.el7_9.6.x86_64.rpm |
| oracle linux | 7 | x86_64 | squid-sysvinit | < 3.5.20-17.el7_9.6 | squid-sysvinit-3.5.20-17.el7_9.6.x86_64.rpm |
Related
nessus
nessus
NewStart CGSL CORE 5.05 / MAIN 5.05 : squid Vulnerability (NS-SA-2022-0025)
2022-05-09 00:00:00
Fedora 33 : 7:squid (2021-7d86bec29e)
2021-04-19 00:00:00
RHEL 7 : squid (RHSA-2021:1135)
2021-04-08 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: squid-4.14-1.fc33
2021-04-09 15:17:08
[SECURITY] Fedora 34 Update: squid-4.14-1.fc34
2021-04-06 00:16:47
[SECURITY] Fedora 32 Update: squid-4.14-1.fc32
2021-04-09 15:41:07
openvas
openvas
Fedora: Security Advisory for squid (FEDORA-2021-ecb24e0b9d)
2021-04-06 00:00:00
Debian: Security Advisory (DSA-4873-1)
2021-03-25 00:00:00
Squid 2.0 < 4.14, 5.0.1 < 5.0.5 HTTP Request Smuggling Vulnerability
2021-03-22 00:00:00
almalinux
almalinux
Important: squid:4 security update
2021-05-18 17:06:56
osv
osv
squid3 - security update
2021-03-19 00:00:00
Important: squid:4 security update
2021-05-18 17:06:56
squid - security update
2021-03-23 00:00:00
centos
centos
squid security update
2021-04-16 20:24:10
prion
prion
Input validation
2021-03-19 05:15:00
oraclelinux
oraclelinux
squid:4 security update
2021-05-26 00:00:00
redhat
redhat
(RHSA-2021:1135) Important: squid security update
2021-04-08 12:29:46
(RHSA-2021:1979) Important: squid:4 security update
2021-05-18 17:06:56
(RHSA-2021:2025) Important: squid:4 security update
2021-05-19 07:04:50
alpinelinux
alpinelinux
CVE-2020-25097
2021-03-19 05:15:00
debian
debian
[SECURITY] [DLA 2598-1] squid3 security update
2021-03-18 22:19:14
[SECURITY] [DSA 4873-1] squid security update
2021-03-23 19:36:46
veracode
veracode
HTTP Request Smuggling
2021-03-20 01:51:05
cve
cve
CVE-2020-25097
2021-03-19 05:15:00
debiancve
debiancve
CVE-2020-25097
2021-03-19 05:15:00
rocky
rocky
squid:4 security update
2021-05-18 17:06:56
redhatcve
redhatcve
CVE-2020-25097
2021-03-17 10:35:00
ubuntucve
ubuntucve
CVE-2020-25097
2021-03-19 00:00:00
amazon
amazon
Important: squid
2021-04-20 17:55:00
ubuntu
ubuntu
Squid vulnerabilities
2021-03-29 00:00:00
suse
suse
Security update for squid (important)
2021-06-16 00:00:00
Security update for squid (important)
2021-07-11 00:00:00
mageia
mageia
Updated squid packages fix security vulnerabilities
2021-06-08 19:46:03
gentoo
gentoo
Squid: Multiple vulnerabilities
2021-05-26 00:00:00
cloudlinux
cloudlinux
rosalinux
rosalinux
Advisory ROSA-SA-2021-1976
2021-07-02 18:10:45
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related for ELSA-2021-1135