Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2020/05/06 1:27 p.m.6 views

squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow

A flaw was found in Squid through version 4.7. When handling the tag esi:when, when ESI is enabled, Squid calls the ESIExpression::Evaluate function which uses a fixed stack buffer to hold the expression. While processing the expression, there is no check to ensure that the stack won't overflow...

9.8CVSS6.1AI score0.06554EPSS
SaveExploits0References6
Rows per page
Query Builder