Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2020:2041
HistoryMay 06, 2020 - 12:52 p.m.

(RHSA-2020:2041) Important: squid:4 security update

2020-05-0612:52:10
access.redhat.com
48

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.162 Low

EPSS

Percentile

95.9%

JSON

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow (CVE-2019-12519)

  • squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code execution (CVE-2020-11945)

  • squid: parsing of header Proxy-Authentication leads to memory corruption (CVE-2019-12525)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyx86_64squid-debugsource< 4.4-8.module+el8.2.0+6449+6ba3df3e.1squid-debugsource-4.4-8.module+el8.2.0+6449+6ba3df3e.1.x86_64.rpm
RedHatanyx86_64libecap-devel< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHatanyppc64lesquid-debugsource< 4.4-8.module+el8.2.0+6449+6ba3df3e.1squid-debugsource-4.4-8.module+el8.2.0+6449+6ba3df3e.1.ppc64le.rpm
RedHatanyppc64lelibecap< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHatanyaarch64libecap-debuginfo< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-debuginfo-1.0.1-2.module+el8.1.0+4044+36416a77.aarch64.rpm
RedHatanyx86_64squid-debuginfo< 4.4-8.module+el8.2.0+6449+6ba3df3e.1squid-debuginfo-4.4-8.module+el8.2.0+6449+6ba3df3e.1.x86_64.rpm
RedHatanyx86_64squid< 4.4-8.module+el8.2.0+6449+6ba3df3e.1squid-4.4-8.module+el8.2.0+6449+6ba3df3e.1.x86_64.rpm
RedHatanys390xlibecap-debugsource< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-debugsource-1.0.1-2.module+el8.1.0+4044+36416a77.s390x.rpm
RedHatanys390xsquid-debugsource< 4.4-8.module+el8.2.0+6449+6ba3df3e.1squid-debugsource-4.4-8.module+el8.2.0+6449+6ba3df3e.1.s390x.rpm
RedHatanyaarch64squid-debugsource< 4.4-8.module+el8.2.0+6449+6ba3df3e.1squid-debugsource-4.4-8.module+el8.2.0+6449+6ba3df3e.1.aarch64.rpm
Rows per page:
1-10 of 281

Related

nessus 45
centos 1
redhat 3
oraclelinux 4
osv 9
openvas 34
almalinux 1
rocky 1
amazon 3
gentoo 1
ubuntu 3
debiancve 3
prion 3
cve 3
redhatcve 3
veracode 3
alpinelinux 3
fedora 4
ubuntucve 3
mageia 3
suse 3
debian 5
altlinux 2
cloudlinux 1
nessus
nessus
Scientific Linux Security Update : squid on SL7.x x86_64 (20200506)
2020-05-07 00:00:00
CentOS 7 : squid (CESA-2020:2040)
2020-05-22 00:00:00
Oracle Linux 8 : squid:4 (ELSA-2020-2041)
2020-08-13 00:00:00
centos
centos
squid security update
2020-05-21 14:55:03
redhat
redhat
(RHSA-2020:2040) Important: squid security update
2020-05-06 12:46:17
(RHSA-2020:2038) Important: squid:4 security update
2020-05-06 11:55:10
(RHSA-2020:2039) Important: squid:4 security update
2020-05-06 12:46:24
oraclelinux
oraclelinux
squid security update
2020-05-07 00:00:00
squid:4 security update
2020-05-12 00:00:00
squid:4 security update
2020-09-04 00:00:00
osv
osv
Important: squid:4 security update
2020-05-06 12:52:10
Important: squid:4 security update
2020-05-06 12:52:10
CVE-2019-12519
2020-04-15 20:15:00
openvas
openvas
CentOS: Security Advisory for squid (CESA-2020:2040)
2020-05-22 00:00:00
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-1828)
2020-07-31 00:00:00
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-1931)
2020-09-04 00:00:00
almalinux
almalinux
Important: squid:4 security update
2020-05-06 12:52:10
rocky
rocky
squid:4 security update
2020-05-06 12:52:10
amazon
amazon
Important: squid
2020-06-26 22:56:00
Important: squid
2020-06-23 06:08:00
Important: squid
2020-06-01 12:25:00
gentoo
gentoo
Squid: Multiple vulnerabilities
2020-05-12 00:00:00
ubuntu
ubuntu
Squid vulnerabilities
2020-05-13 00:00:00
Squid vulnerabilities
2019-07-22 00:00:00
Squid vulnerabilities
2019-07-18 00:00:00
debiancve
debiancve
CVE-2019-12525
2019-07-11 19:15:00
CVE-2019-12519
2020-04-15 20:15:00
CVE-2020-11945
2020-04-23 15:15:00
prion
prion
Stack overflow
2020-04-15 20:15:00
Authentication flaw
2019-07-11 19:15:00
Design/Logic Flaw
2020-04-23 15:15:00
cve
cve
CVE-2019-12519
2020-04-15 20:15:00
CVE-2019-12525
2019-07-11 19:15:00
CVE-2020-11945
2020-04-23 15:15:00
redhatcve
redhatcve
CVE-2019-12519
2020-04-24 08:03:41
CVE-2019-12525
2020-04-03 01:59:08
CVE-2020-11945
2020-04-24 08:33:53
veracode
veracode
Denial Of Service (DoS)
2020-05-07 02:01:36
Denial Of Service (DoS)
2020-05-07 02:01:35
Remote Code Execution (RCE)
2020-05-07 02:01:36
alpinelinux
alpinelinux
CVE-2020-11945
2020-04-23 15:15:00
CVE-2019-12525
2019-07-11 19:15:00
CVE-2019-12519
2020-04-15 20:15:00
fedora
fedora
[SECURITY] Fedora 31 Update: squid-4.11-1.fc31
2020-05-16 03:11:17
[SECURITY] Fedora 30 Update: squid-4.11-1.fc30
2020-05-16 04:21:08
[SECURITY] Fedora 32 Update: squid-4.11-1.fc32
2020-05-16 03:40:02
ubuntucve
ubuntucve
CVE-2019-12519
2020-04-15 00:00:00
CVE-2019-12525
2019-07-11 00:00:00
CVE-2020-11945
2020-04-23 00:00:00
mageia
mageia
Updated squid packages fix security vulnerability
2020-05-05 15:20:37
Updated squid packages fix security vulnerabilities
2019-09-12 22:09:52
Updated squid packages fix security vulnerabilities
2019-09-12 22:09:52
suse
suse
Security update for squid (important)
2020-05-11 00:00:00
Security update for squid (important)
2019-11-21 00:00:00
Security update for squid (important)
2019-11-21 00:00:00
debian
debian
[SECURITY] [DLA 1858-1] squid3 security update
2019-07-20 23:09:33
[SECURITY] [DLA 2278-1] squid3 security update
2020-07-10 21:55:24
[SECURITY] [DSA 4507-1] squid security update
2019-08-24 11:46:36
altlinux
altlinux
Security fix for the ALT Linux 9 package squid version 4.8-alt1
2019-07-16 00:00:00
Security fix for the ALT Linux 8 package squid version 3.5.28-alt1
2019-08-27 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2020-8517, CVE-2021-28651, CVE-2020-15049, CVE-2020-8449, CVE-2020-8450, CVE-2020-24606, CVE-2020-25097, CVE-2020-11945, CVE-2020-14058
2021-09-21 22:10:21

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.162 Low

EPSS

Percentile

95.9%

JSON
Related for RHSA-2020:2041
nessus45centos1redhat3oraclelinux4osv9openvas34almalinux1rocky1amazon3gentoo1ubuntu3debiancve3prion3cve3redhatcve3veracode3alpinelinux3fedora4ubuntucve3mageia3suse3debian5altlinux2cloudlinux1