Veracode Vulnerability DatabaseVERACODE:26094Denial Of Service (DoS)
EPSS
Percentile
74.6%
squid is vulnerable to denial of service. The vulnerability exists due to incorrect input validation, the NTLM authentication credentials parser in ext_lm_group_acl may write to memory outside the credentials buffer. On systems with memory access protections, this can result in the helper process being terminated unexpectedly.
References
lists.opensuse.org/opensuse-security-announce/2020-03/msg00012.html
lists.opensuse.org/opensuse-security-announce/2020-05/msg00010.html
lists.opensuse.org/opensuse-security-announce/2020-05/msg00018.html
www.squid-cache.org/Advisories/SQUID-2020_3.txt
www.squid-cache.org/Versions/v4/changesets/squid-4-6982f1187a26557e582172965e266f544ea562a5.patch
security.gentoo.org/glsa/202003-34
security.netapp.com/advisory/ntap-20210304-0002/
usn.ubuntu.com/4289-1/
Related
