Lucene search

K
oraclelinuxOracleLinuxELSA-2022-5542
HistoryJul 12, 2022 - 12:00 a.m.

squid security update

2022-07-1200:00:00
linux.oracle.com
45

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

[7:3.5.20-17.0.1]

  • Mutiple CVE fixes for squid [Orabug: 33146289]
  • Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing (#778)
  • Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manager URL parsing (#788)
  • Resolves: CVE-2021-31806,31807,31808 squid: Handle more Range requests (#790)
  • Resolves: CVE-2021-33620 squid: Handle more partial responses (#791)
    [7:3.5.20-17.7]
  • Resolves: #2100778 - CVE-2021-46784 squid: DoS when processing gopher server
    responses
    [7:3.5.20-17.6]
  • Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow
    a trusted client to perform HTTP Request Smuggling
    [7:3.5.20-17.5]
  • Resolves: #1890581 - Fix for CVE 2019-13345 breaks authentication in
    cachemgr.cgi
    [7:3.5.20-17.4]
  • Resolves: #1872349 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  • Resolves: #1872327 - CVE-2020-15810 squid: HTTP Request Smuggling could
    result in cache poisoning
  • Resolves: #1872342 - CVE-2020-15811 squid: HTTP Request Splitting could
    result in cache poisoning
    [7:3.5.20-17.2]
  • Resolves: #1802516 - CVE-2020-8449 squid: Improper input validation issues
    in HTTP Request processing
  • Resolves: #1802515 - CVE-2020-8450 squid: Buffer overflow in a Squid acting
    as reverse-proxy
  • Resolves: #1853129 - CVE-2020-15049 squid: request smuggling and poisoning
    attack against the HTTP cache
  • Resolves: #1802517 - CVE-2019-12528 squid: Information Disclosure issue in
    FTP Gateway

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H