Lucene search
Redhat.comRH:CVE-2019-12528HistoryApr 08, 2020 - 9:04 p.m.
CVE-2019-12528
2020-04-0821:04:49
redhat.com
access.redhat.com
14
EPSS
0.009
Percentile
83.1%
A flaw was found in squid. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users’ sessions or non-Squid processes.
Mitigation
As a workaround, it is possible to disable support for FTP. In order to do so, remove the following line from your squid configuration file:
acl Safe_ports 21
Then add the following lines to your squid configuration file:
acl FTP proto FTP
http_access deny FTP
Related
hackerone
hackerone
Internet Bug Bounty: Squid leaks previous content from reusable buffer
2020-03-18 22:01:47
alpinelinux
alpinelinux
CVE-2019-12528
2020-02-04 21:15:10
nvd
nvd
CVE-2019-12528
2020-02-04 21:15:10
ubuntucve
ubuntucve
CVE-2019-12528
2020-02-04 00:00:00
cvelist
cvelist
CVE-2019-12528
2020-02-04 20:07:15
veracode
veracode
Information Disclosure
2020-08-06 21:32:19
cve
cve
CVE-2019-12528
2020-02-04 21:15:10
debiancve
debiancve
CVE-2019-12528
2020-02-04 21:15:10
osv
osv
CVE-2019-12528
2020-02-04 21:15:10
squid - security update
2020-05-08 00:00:00
Moderate: squid:4 security, bug fix, and enhancement update
2020-11-03 12:32:17
prion
prion
Design/Logic Flaw
2020-02-04 21:15:00
fedora
fedora
[SECURITY] Fedora 30 Update: squid-4.10-3.fc30
2020-04-03 18:03:14
[SECURITY] Fedora 31 Update: squid-4.10-3.fc31
2020-04-03 19:16:33
[SECURITY] Fedora 32 Update: squid-4.11-1.fc32
2020-05-16 03:40:02
nessus
nessus
EulerOS 2.0 SP8 : squid (EulerOS-SA-2020-1884)
2020-08-28 00:00:00
Squid < 4.10 Multiple Vulnerabilities
2021-02-10 00:00:00
Fedora 31 : 7:squid (2020-790296a8f4)
2020-04-06 00:00:00
openvas
openvas
Fedora: Security Advisory for squid (FEDORA-2020-ab8e7463ab)
2020-04-04 00:00:00
Fedora: Security Advisory for squid (FEDORA-2020-790296a8f4)
2020-04-04 00:00:00
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-1884)
2020-08-31 00:00:00
amazon
amazon
Medium: squid
2020-09-01 00:40:00
Important: squid
2020-11-16 17:59:00
suse
suse
Security update for squid (moderate)
2020-03-06 00:00:00
Security update for squid (moderate)
2020-05-03 00:00:00
Security update for squid (important)
2020-05-11 00:00:00
mageia
mageia
Updated squid packages fix security vulnerabilities
2020-02-26 13:21:01
ubuntu
ubuntu
Squid vulnerabilities
2020-02-20 00:00:00
freebsd
freebsd
Squid -- multiple vulnerabilities
2020-02-10 00:00:00
centos
centos
squid security update
2020-11-06 22:15:00
gentoo
gentoo
Squid: Multiple vulnerabilities
2020-03-16 00:00:00
redhat
redhat
(RHSA-2020:4082) Important: squid security update
2020-09-30 00:17:14
(RHSA-2020:4743) Moderate: squid:4 security, bug fix, and enhancement update
2020-11-03 12:32:17
altlinux
altlinux
Security fix for the ALT Linux 9 package squid version 4.10-alt1
2020-03-16 00:00:00
oraclelinux
oraclelinux
squid security update
2020-10-08 00:00:00
squid:4 security, bug fix, and enhancement update
2020-11-10 00:00:00
debian
debian
[SECURITY] [DSA 4682-1] squid security update
2020-05-08 19:10:03
[SECURITY] [DLA 2278-1] squid3 security update
2020-07-10 21:55:24
rocky
rocky
squid:4 security, bug fix, and enhancement update
2020-11-03 12:32:17
almalinux
almalinux
Moderate: squid:4 security, bug fix, and enhancement update
2020-11-03 12:32:17
rosalinux
rosalinux
Advisory ROSA-SA-2021-1976
2021-07-02 18:10:45
ibm
ibm