Lucene search

K
ubuntuUbuntuUSN-4446-1
HistoryAug 03, 2020 - 12:00 a.m.

Squid vulnerabilities

2020-08-0300:00:00
ubuntu.com
43

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

87.9%

Releases

  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • squid3 - Web proxy cache server

Details

Jeriko One discovered that Squid incorrectly handled caching certain
requests. A remote attacker could possibly use this issue to perform
cache-injection attacks or gain access to reverse proxy features such as
ESI. (CVE-2019-12520)

Jeriko One and Kristoffer Danielsson discovered that Squid incorrectly
handled certain URN requests. A remote attacker could possibly use this
issue to bypass access checks. (CVE-2019-12523)

Jeriko One discovered that Squid incorrectly handled URL decoding. A remote
attacker could possibly use this issue to bypass certain rule checks.
(CVE-2019-12524)

Jeriko One and Kristoffer Danielsson discovered that Squid incorrectly
handled input validation. A remote attacker could use this issue to cause
Squid to crash, resulting in a denial of service. (CVE-2019-18676)

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchsquid< 3.5.27-1ubuntu1.7UNKNOWN
Ubuntu18.04noarchsquid-cgi< 3.5.27-1ubuntu1.7UNKNOWN
Ubuntu18.04noarchsquid-common< 3.5.27-1ubuntu1.7UNKNOWN
Ubuntu18.04noarchsquid-dbg< 3.5.27-1ubuntu1.7UNKNOWN
Ubuntu18.04noarchsquid-purge< 3.5.27-1ubuntu1.7UNKNOWN
Ubuntu18.04noarchsquid3< 3.5.27-1ubuntu1.7UNKNOWN
Ubuntu18.04noarchsquidclient< 3.5.27-1ubuntu1.7UNKNOWN
Ubuntu16.04noarchsquid< 3.5.12-1ubuntu7.12UNKNOWN
Ubuntu16.04noarchsquid-cgi< 3.5.12-1ubuntu7.12UNKNOWN
Ubuntu16.04noarchsquid-cgi-dbgsym< 3.5.12-1ubuntu7.12UNKNOWN
Rows per page:
1-10 of 181

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

87.9%