Lucene search
Veracode Vulnerability DatabaseVERACODE:37281HistorySep 26, 2022 - 11:57 p.m.
Information Disclosure
2022-09-2623:57:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
22
squid
information disclosure
vulnerability
cache manager
file system
acl protection
EPSS
0.001
Percentile
42.3%
squid is vulnerable to information disclosure. The vulnerability exits due to inconsistent handling of internal URIs, which allows an attacker to gain access to cache manager information in the file system via bypassing the manager ACL protection.
References
git://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2022-41317
www.squid-cache.org/Versions/v4/changesets/SQUID-2022_1.patch
www.squid-cache.org/Versions/v5/changesets/SQUID-2022_1.patch
bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-41317
bugzilla.suse.com/show_bug.cgi?id=CVE-2022-41317
github.com/squid-cache/squid/security/advisories/GHSA-rcg9-7fqm-83mq
security-tracker.debian.org/tracker/CVE-2022-41317
www.openwall.com/lists/oss-security/2022/09/23/1
Related
alpinelinux
alpinelinux
CVE-2022-41317
2022-12-25 19:15:10
redos
redos
ROS-20230112-01
2023-01-12 00:00:00
osv
osv
CVE-2022-41317
2022-12-25 19:15:10
squid, squid3 vulnerabilities
2022-09-26 16:23:50
squid - security update
2022-10-13 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-12-25 19:15:00
debiancve
debiancve
CVE-2022-41317
2022-12-25 19:15:10
ubuntucve
ubuntucve
CVE-2022-41317
2022-09-23 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:3533-1)
2022-10-07 00:00:00
Mageia: Security Advisory (MGASA-2022-0351)
2022-10-03 00:00:00
nessus
nessus
Amazon Linux 2 : squid (ALASSQUID4-2023-002)
2023-09-27 00:00:00
FreeBSD : squid -- Exposure of sensitive information in cache manager (f9ada0b5-3d80-11ed-9330-080027f5fec9)
2022-09-26 00:00:00
RHEL 8 : squid (Unpatched Vulnerability)
2024-05-11 00:00:00
cvelist
cvelist
CVE-2022-41317
2022-12-25 00:00:00
redhatcve
redhatcve
CVE-2022-41317
2022-09-26 09:49:28
nvd
nvd
CVE-2022-41317
2022-12-25 19:15:10
cve
cve
CVE-2022-41317
2022-12-25 19:15:10
freebsd
freebsd
squid -- Exposure of sensitive information in cache manager
2022-04-17 00:00:00
ubuntu
ubuntu
Squid vulnerabilities
2022-09-26 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: squid-5.7-1.fc37
2022-10-04 15:13:48
[SECURITY] Fedora 36 Update: squid-5.7-1.fc36
2022-10-05 01:01:55
[SECURITY] Fedora 35 Update: squid-5.7-1.fc35
2022-10-05 01:05:06
mageia
mageia
Updated squid packages fix security vulnerability
2022-10-01 20:48:24
suse
suse
Security update for squid (important)
2022-10-17 00:00:00
Security update for squid (important)
2022-10-06 00:00:00
debian
debian
[SECURITY] [DSA 5258-1] squid security update
2022-10-19 08:18:22
[SECURITY] [DLA 3151-1] squid security update
2022-10-12 19:31:44
photon
photon
Important Photon OS Security Update - PHSA-2023-0310
2023-01-09 00:00:00
Important Photon OS Security Update - PHSA-2023-0513
2023-01-10 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0513
2023-01-10 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2273
2023-10-22 06:19:50
amazon
amazon
Medium: squid
2023-02-17 00:11:00
Medium: squid
2023-02-17 00:02:00