CVE-2019-12522

An issue was discovered in Squid through 4.7. When Squid is run as root, it spawns its child processes as a lesser user, by default the user nobody. This is done via the leavesuid call. leavesuid leaves the Saved UID as 0. This makes it trivial for an attacker who has compromised the child proces...

PT-2020-9333

Name of the Vulnerable Software and Affected Versions: Squid versions through 4.7 Description: An issue was discovered in Squid when it is run as root. It spawns its child processes as a lesser user, by default the user nobody, via the leave suid call. The leave suid call leaves the Saved UID as ...