Lucene search
PRIOn knowledge basePRION:CVE-2021-28116HistoryMar 09, 2021 - 10:15 p.m.
Information disclosure
2021-03-0922:15:00
PRIOn knowledge base
www.prio-n.com
37
Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.
References
www.openwall.com/lists/oss-security/2021/10/04/1
www.squid-cache.org/Versions/
github.com/squid-cache/squid/security/advisories/GHSA-rgf3-9v3p-qp82
lists.fedoraproject.org/archives/list/[email protected]/message/LSQ3U54ZCNXR44QRPW3AV2VCS6K3TKCF/
lists.fedoraproject.org/archives/list/[email protected]/message/T4EPIWUZDJAXADDHVOPKRBTQHPBR6H66/
security.gentoo.org/glsa/202105-14
www.debian.org/security/2022/dsa-5171
www.zerodayinitiative.com/advisories/ZDI-21-157/
Related
nessus
nessus
EulerOS 2.0 SP8 : squid (EulerOS-SA-2021-2815)
2021-12-26 00:00:00
SUSE SLES15 Security Update : squid (SUSE-SU-2021:3485-1)
2021-10-21 00:00:00
openSUSE 15 Security Update : squid (openSUSE-SU-2021:1419-1)
2021-11-01 00:00:00
veracode
veracode
Information Disclosure
2021-10-05 17:24:27
alpinelinux
alpinelinux
CVE-2021-28116
2021-03-09 22:15:12
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0499)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3334-1)
2021-10-12 00:00:00
Squid Information Disclosure Vulnerability (SQUID-2020:12)
2021-03-10 00:00:00
osv
osv
Moderate: squid:4 security and bug fix update
2022-05-10 00:00:00
squid, squid3 vulnerability
2021-10-05 14:05:18
CVE-2021-28116
2021-03-09 22:15:12
oraclelinux
oraclelinux
squid:4 security and bug fix update
2022-05-17 00:00:00
nvd
nvd
CVE-2021-28116
2021-03-09 22:15:12
redhatcve
redhatcve
CVE-2021-28116
2021-03-17 10:34:28
suse
suse
Security update for squid (moderate)
2021-10-20 00:00:00
Security update for squid (moderate)
2021-10-31 00:00:00
cve
cve
CVE-2021-28116
2021-03-09 22:15:12
ubuntucve
ubuntucve
CVE-2021-28116
2021-03-09 00:00:00
debiancve
debiancve
CVE-2021-28116
2021-03-09 22:15:12
ubuntu
ubuntu
Squid vulnerability
2021-10-05 00:00:00
redhat
redhat
(RHSA-2022:1939) Moderate: squid:4 security and bug fix update
2022-05-10 06:39:58
rocky
rocky
squid:4 security and bug fix update
2022-05-10 06:39:58
mageia
mageia
Updated squid packages fix security vulnerability
2021-10-31 14:12:48
almalinux
almalinux
Moderate: squid:4 security and bug fix update
2022-05-10 00:00:00
cvelist
cvelist
CVE-2021-28116
2021-03-09 21:44:58
debian
debian
[SECURITY] [DSA 5171-1] squid security update
2022-06-27 18:45:27
amazon
amazon
Critical: squid
2023-10-25 21:40:00
Critical: squid
2023-10-25 21:40:00
fedora
fedora
[SECURITY] Fedora 34 Update: squid-5.0.6-1.fc34
2021-06-11 01:16:02
[SECURITY] Fedora 33 Update: squid-4.15-1.fc33
2021-06-11 01:20:16
gentoo
gentoo
Squid: Multiple vulnerabilities
2021-05-26 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2021-0063
2021-07-19 00:00:00
Important Photon OS Security Update - PHSA-2021-4.0-0063
2021-07-20 00:00:00
Important Photon OS Security Update - PHSA-2021-3.0-0269
2021-07-20 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1976
2021-07-02 18:10:45