45 matches found
CVE-2021-28116
Squid 4.14 and 5.x up to 5.0.5 are affected by an information-disclosure issue due to an out-of-bounds read in WCCP protocol data, which can be chained to remote code execution as nobody. The connected advisories/entries indicate fixes in newer Squid releases (e.g., subsequent 4.15/5.0.6+ variant...
EUVD-2021-14817
Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody...
(0Day) Squid Cache WCCP Protocol Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Squid Cache. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the WCCP protocol. The issue results from the lack of proper...
(0Day) Squid Cache WCCP Protocol Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Squid Cache. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the WCCP protocol. The issue results from the lack of validating the existen...
