Lucene search
Redhat.comRH:CVE-2020-25097HistoryMar 17, 2021 - 10:35 a.m.
CVE-2020-25097
2021-03-1710:35:00
redhat.com
access.redhat.com
11
squid
http request smuggling
data confidentiality
vulnerability
mitigation
validation
parsing
services access
EPSS
0.003
Percentile
69.7%
A flaw was found in squid. Due to improper validation while parsing the request URI, squid is vulnerable to HTTP request smuggling. This issue could allow a trusted client to perform an HTTP request smuggling attack and access services otherwise forbidden by squid. The highest threat from this vulnerability is to data confidentiality.
Mitigation
This flaw can be mitigated by setting the uri_whitespace directive in squid.conf to either:
uri_whitespace deny
or
uri_whitespace encode
Related
openvas
openvas
Fedora: Security Advisory for squid (FEDORA-2021-ecb24e0b9d)
2021-04-06 00:00:00
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2021-1989)
2021-06-29 00:00:00
Debian: Security Advisory (DSA-4873-1)
2021-03-25 00:00:00
cvelist
cvelist
CVE-2020-25097
2021-03-19 04:08:54
nessus
nessus
Fedora 33 : 7:squid (2021-7d86bec29e)
2021-04-19 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : squid Vulnerability (NS-SA-2022-0025)
2022-05-09 00:00:00
RHEL 7 : squid (RHSA-2021:1135)
2021-04-08 00:00:00
almalinux
almalinux
Important: squid:4 security update
2021-05-18 17:06:56
fedora
fedora
[SECURITY] Fedora 33 Update: squid-4.14-1.fc33
2021-04-09 15:17:08
[SECURITY] Fedora 34 Update: squid-4.14-1.fc34
2021-04-06 00:16:47
[SECURITY] Fedora 32 Update: squid-4.14-1.fc32
2021-04-09 15:41:07
oraclelinux
oraclelinux
squid security update
2021-04-09 00:00:00
squid:4 security update
2021-05-26 00:00:00
centos
centos
squid security update
2021-04-16 20:24:10
osv
osv
squid3 - security update
2021-03-19 00:00:00
Important: squid:4 security update
2021-05-18 17:06:56
CVE-2020-25097
2021-03-19 05:15:12
redhat
redhat
(RHSA-2021:1135) Important: squid security update
2021-04-08 12:29:46
(RHSA-2021:2025) Important: squid:4 security update
2021-05-19 07:04:50
(RHSA-2021:1979) Important: squid:4 security update
2021-05-18 17:06:56
prion
prion
Input validation
2021-03-19 05:15:00
alpinelinux
alpinelinux
CVE-2020-25097
2021-03-19 05:15:12
debian
debian
[SECURITY] [DLA 2598-1] squid3 security update
2021-03-18 22:19:14
[SECURITY] [DSA 4873-1] squid security update
2021-03-23 19:36:46
debiancve
debiancve
CVE-2020-25097
2021-03-19 05:15:12
rocky
rocky
squid:4 security update
2021-05-18 17:06:56
ubuntucve
ubuntucve
CVE-2020-25097
2021-03-19 00:00:00
amazon
amazon
Important: squid
2021-04-20 17:55:00
veracode
veracode
HTTP Request Smuggling
2021-03-20 01:51:05
nvd
nvd
CVE-2020-25097
2021-03-19 05:15:12
cve
cve
CVE-2020-25097
2021-03-19 05:15:12
ubuntu
ubuntu
Squid vulnerabilities
2021-03-29 00:00:00
suse
suse
Security update for squid (important)
2021-06-16 00:00:00
Security update for squid (important)
2021-07-11 00:00:00
mageia
mageia
Updated squid packages fix security vulnerabilities
2021-06-08 19:46:03
gentoo
gentoo
Squid: Multiple vulnerabilities
2021-05-26 00:00:00
cloudlinux
cloudlinux
rosalinux
rosalinux
Advisory ROSA-SA-2021-1976
2021-07-02 18:10:45