Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-8517
HistoryFeb 04, 2020 - 12:00 a.m.

CVE-2020-8517

2020-02-0400:00:00
ubuntu.com
ubuntu.com
12

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.004 Low

EPSS

Percentile

74.6%

An issue was discovered in Squid before 4.10. Due to incorrect input
validation, the NTLM authentication credentials parser in ext_lm_group_acl
may write to memory outside the credentials buffer. On systems with memory
access protections, this can result in the helper process being terminated
unexpectedly. This leads to the Squid process also terminating and a denial
of service for all clients using the proxy.

OSVersionArchitecturePackageVersionFilename
ubuntu19.10noarchsquid< 4.8-1ubuntu2.2UNKNOWN
ubuntu20.04noarchsquid< 4.9-2ubuntu4UNKNOWN
ubuntu20.10noarchsquid< 4.9-2ubuntu4UNKNOWN
ubuntu21.04noarchsquid< 4.9-2ubuntu4UNKNOWN
ubuntu18.04noarchsquid3< 3.5.27-1ubuntu1.5UNKNOWN
ubuntu16.04noarchsquid3< 3.5.12-1ubuntu7.10UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.004 Low

EPSS

Percentile

74.6%