Lucene search

K
ubuntuUbuntuUSN-4289-1
HistoryFeb 20, 2020 - 12:00 a.m.

Squid vulnerabilities

2020-02-2000:00:00
ubuntu.com
66

8.6 High

AI Score

Confidence

High

0.931 High

EPSS

Percentile

99.0%

Releases

  • Ubuntu 19.10
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • squid - Web proxy cache server
  • squid3 - Web proxy cache server

Details

Jeriko One discovered that Squid incorrectly handled memory when connected
to an FTP server. A remote attacker could possibly use this issue to obtain
sensitive information from Squid memory. (CVE-2019-12528)

Regis Leroy discovered that Squid incorrectly handled certain HTTP
requests. A remote attacker could possibly use this issue to access server
resources prohibited by earlier security filters. (CVE-2020-8449)

Guido Vranken discovered that Squid incorrectly handled certain buffer
operations when acting as a reverse proxy. A remote attacker could use
this issue to cause Squid to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2020-8450)

Aaron Costello discovered that Squid incorrectly handled certain NTLM
authentication credentials. A remote attacker could possibly use this issue
to cause Squid to crash, resulting in a denial of service. (CVE-2020-8517)

Rows per page:
1-10 of 281