EUVD-2019-4114

Malware in sbrugna...

CVE-2019-12519

An issue was discovered in Squid through 4.7. When handling the tag esi:when when ESI is enabled, Squid calls ESIExpression::Evaluate. This function uses a fixed stack buffer to hold the expression while it's being evaluated. When processing the expression, it could either evaluate the top of the...

PT-2020-5786

Name of the Vulnerable Software and Affected Versions: Squid versions through 4.7 Description: The issue is related to the ESIExpression::Evaluate function in the Squid proxy server, which is associated with a buffer data boundary overflow. This could allow a remote attacker to access confidentia...