Lucene search

K
redhatcveRedhat.comRH:CVE-2019-12519
HistoryApr 24, 2020 - 8:03 a.m.

CVE-2019-12519

2020-04-2408:03:41
redhat.com
access.redhat.com
20

0.013 Low

EPSS

Percentile

85.8%

A flaw was found in Squid through version 4.7. When handling the tag esi:when, when ESI is enabled, Squid calls the ESIExpression::Evaluate function which uses a fixed stack buffer to hold the expression. While processing the expression, there is no check to ensure that the stack won’t overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.