51 matches found
openSUSE: Security Advisory for squid (openSUSE-SU-2019:1963-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 29 : 7:squid (2019-cb50bcc189)
Resolves: 1737030 - Depend on httpd-filesystem ---- Security fix for CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 . - update to version 4.8 ---- Security fix for CVE-2019-13345. Note that Tenable Network Security has extracted the preceding description block directly from the Fedor...
SUSE SLES15 Security Update : squid (SUSE-SU-2019:2092-1)
This update for squid fixes the following issues : Security issue fixed : CVE-2019-13345: Fixed a cross-site scripting vulnerability via username or auth parameter in cachemgr.cgi bsc1140738. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...
Fedora 30 : 7:squid (2019-c1e06901bc)
Security fix for CVE-2019-13345. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...
USN-4059-2: Squid vulnerabilities
USN-4059-1 and USN-3557-1 fixed several vulnerabilities in Squid. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Louis Dion-Marcil discovered that Squid incorrectly handled certain Edge Side Includes ESI responses. A malicious remote server could...
Security fix for the ALT Linux 9 package squid version 4.8-alt1
4.8-alt1 built July 16, 2019 Alexey Shabalin in task 234609 --- July 15, 2019 Alexey Shabalin - Updated to 4.8 - Fixes: + CVE-2019-12854 Denial of Service issue in cachemgr.cgi + CVE-2019-12529 Denial of Service in HTTP Basic Authentication + CVE-2019-12525 Denial of Service in HTTP Digest...
CVE-2019-13345
The cachemgr.cgi web module of Squid through 4.7 has XSS via the username or auth parameter...
CVE-2019-13345
creationtimestamp| type| source ---|---|--- 2019-07-05 18:59:55+00:00| seen| https://t.me/cveNotify/258...
CVE-2019-13345
CVE-2019-13345 : XSS in the cachemgr.cgi web module of Squid through 4.7, exploitable via the user_name or auth parameter. Connected advisories confirm multiple distributions issue fixes and recommended upgrades (e.g., Debian DSA-4507, CentOS/RHEL advisories, ALAS-2 entries). The exposure is limi...
