Lucene search

K
oraclelinuxOracleLinuxELSA-2022-6815
HistoryOct 07, 2022 - 12:00 a.m.

squid security update

2022-10-0700:00:00
linux.oracle.com
10

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

[7:3.5.20-17.0.1]

  • Mutiple CVE fixes for squid [Orabug: 33146289]
  • Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing (#778)
  • Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manager URL parsing (#788)
  • Resolves: CVE-2021-31806,31807,31808 squid: Handle more Range requests (#790)
  • Resolves: CVE-2021-33620 squid: Handle more partial responses (#791)
    [7:3.5.20-17.8]
  • Resolves: #2130254 - CVE-2022-41318 squid: buffer-over-read in SSPI and SMB
    authentication

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N