CVE-2021-28116

Squid 4.14 and 5.x up to 5.0.5 are affected by an information-disclosure issue due to an out-of-bounds read in WCCP protocol data, which can be chained to remote code execution as nobody. The connected advisories/entries indicate fixes in newer Squid releases (e.g., subsequent 4.15/5.0.6+ variant...