Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2020:2041
HistoryMay 06, 2020 - 12:52 p.m.

(RHSA-2020:2041) Important: squid:4 security update

2020-05-0612:52:10
access.redhat.com
52

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.138

Percentile

95.7%

JSON

Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.

Security Fix(es):

  • squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow (CVE-2019-12519)

  • squid: improper access restriction upon Digest Authentication nonce replay could lead to remote code execution (CVE-2020-11945)

  • squid: parsing of header Proxy-Authentication leads to memory corruption (CVE-2019-12525)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyx86_64libecap< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHatanyppc64lesquid< 4.4-8.module+el8.2.0+6449+6ba3df3e.1squid-4.4-8.module+el8.2.0+6449+6ba3df3e.1.ppc64le.rpm
RedHatanys390xsquid-debugsource< 4.4-8.module+el8.2.0+6449+6ba3df3e.1squid-debugsource-4.4-8.module+el8.2.0+6449+6ba3df3e.1.s390x.rpm
RedHatanyppc64lesquid-debugsource< 4.4-8.module+el8.2.0+6449+6ba3df3e.1squid-debugsource-4.4-8.module+el8.2.0+6449+6ba3df3e.1.ppc64le.rpm
RedHatanyx86_64libecap-debuginfo< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-debuginfo-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHatanyaarch64squid-debuginfo< 4.4-8.module+el8.2.0+6449+6ba3df3e.1squid-debuginfo-4.4-8.module+el8.2.0+6449+6ba3df3e.1.aarch64.rpm
RedHatanyx86_64libecap-devel< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHatanyppc64lelibecap< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le.rpm
RedHatanyx86_64libecap-debugsource< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-debugsource-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64.rpm
RedHatanyaarch64libecap-debuginfo< 1.0.1-2.module+el8.1.0+4044+36416a77libecap-debuginfo-1.0.1-2.module+el8.1.0+4044+36416a77.aarch64.rpm
Rows per page:
1-10 of 281

Related

nessus 48
centos 1
redhat 3
oraclelinux 4
openvas 34
osv 9
almalinux 1
rocky 1
amazon 3
gentoo 1
ubuntu 3
nvd 3
debiancve 3
alpinelinux 3
redhatcve 3
cvelist 3
cve 3
prion 3
veracode 3
ubuntucve 3
mageia 3
fedora 4
suse 3
debian 5
altlinux 2
cloudlinux 1
nessus
nessus
Scientific Linux Security Update : squid on SL7.x x86_64 (20200506)
2020-05-07 00:00:00
CentOS 7 : squid (CESA-2020:2040)
2020-05-22 00:00:00
RHEL 7 : squid (RHSA-2020:2040)
2020-05-06 00:00:00
centos
centos
squid security update
2020-05-21 14:55:03
redhat
redhat
(RHSA-2020:2040) Important: squid security update
2020-05-06 12:46:17
(RHSA-2020:2038) Important: squid:4 security update
2020-05-06 11:55:10
(RHSA-2020:2039) Important: squid:4 security update
2020-05-06 12:46:24
oraclelinux
oraclelinux
squid:4 security update
2020-05-12 00:00:00
squid security update
2020-05-07 00:00:00
squid:4 security update
2020-09-04 00:00:00
openvas
openvas
CentOS: Security Advisory for squid (CESA-2020:2040)
2020-05-22 00:00:00
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-1931)
2020-09-04 00:00:00
Huawei EulerOS: Security Advisory for squid (EulerOS-SA-2020-1828)
2020-07-31 00:00:00
osv
osv
Important: squid:4 security update
2020-05-06 12:52:10
Important: squid:4 security update
2020-05-06 12:52:10
CVE-2019-12519
2020-04-15 20:15:00
almalinux
almalinux
Important: squid:4 security update
2020-05-06 12:52:10
rocky
rocky
squid:4 security update
2020-05-06 12:52:10
amazon
amazon
Important: squid
2020-06-01 12:25:00
Important: squid
2020-06-23 06:08:00
Important: squid
2020-06-26 22:56:00
gentoo
gentoo
Squid: Multiple vulnerabilities
2020-05-12 00:00:00
ubuntu
ubuntu
Squid vulnerabilities
2020-05-13 00:00:00
Squid vulnerabilities
2019-07-22 00:00:00
Squid vulnerabilities
2019-07-18 00:00:00
nvd
nvd
CVE-2019-12525
2019-07-11 19:15:13
CVE-2019-12519
2020-04-15 20:15:13
CVE-2020-11945
2020-04-23 15:15:14
debiancve
debiancve
CVE-2019-12525
2019-07-11 19:15:13
CVE-2019-12519
2020-04-15 20:15:13
CVE-2020-11945
2020-04-23 15:15:14
alpinelinux
alpinelinux
CVE-2019-12519
2020-04-15 20:15:13
CVE-2019-12525
2019-07-11 19:15:13
CVE-2020-11945
2020-04-23 15:15:14
redhatcve
redhatcve
CVE-2019-12519
2020-04-24 08:03:41
CVE-2019-12525
2020-04-03 01:59:08
CVE-2020-11945
2020-04-24 08:33:53
cvelist
cvelist
CVE-2019-12519
2020-04-15 19:20:41
CVE-2020-11945
2020-04-23 14:16:55
CVE-2019-12525
2019-07-11 18:17:49
cve
cve
CVE-2019-12525
2019-07-11 19:15:13
CVE-2019-12519
2020-04-15 20:15:13
CVE-2020-11945
2020-04-23 15:15:14
prion
prion
Stack overflow
2020-04-15 20:15:00
Design/Logic Flaw
2020-04-23 15:15:00
Authentication flaw
2019-07-11 19:15:00
veracode
veracode
Denial Of Service (DoS)
2020-05-07 02:01:35
Remote Code Execution (RCE)
2020-05-07 02:01:36
Denial Of Service (DoS)
2020-05-07 02:01:36
ubuntucve
ubuntucve
CVE-2019-12519
2020-04-15 00:00:00
CVE-2019-12525
2019-07-11 00:00:00
CVE-2020-11945
2020-04-23 00:00:00
mageia
mageia
Updated squid packages fix security vulnerability
2020-05-05 15:20:37
Updated squid packages fix security vulnerabilities
2019-09-12 22:09:52
Updated squid packages fix security vulnerabilities
2019-09-12 22:09:52
fedora
fedora
[SECURITY] Fedora 31 Update: squid-4.11-1.fc31
2020-05-16 03:11:17
[SECURITY] Fedora 30 Update: squid-4.11-1.fc30
2020-05-16 04:21:08
[SECURITY] Fedora 32 Update: squid-4.11-1.fc32
2020-05-16 03:40:02
suse
suse
Security update for squid (important)
2020-05-11 00:00:00
Security update for squid (important)
2019-11-21 00:00:00
Security update for squid (important)
2019-11-21 00:00:00
debian
debian
[SECURITY] [DLA 1858-1] squid3 security update
2019-07-20 23:09:33
[SECURITY] [DLA 2278-1] squid3 security update
2020-07-10 21:55:24
[SECURITY] [DSA 4507-1] squid security update
2019-08-24 11:46:36
altlinux
altlinux
Security fix for the ALT Linux 9 package squid version 4.8-alt1
2019-07-16 00:00:00
Security fix for the ALT Linux 8 package squid version 3.5.28-alt1
2019-08-27 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2020-8517, CVE-2021-28651, CVE-2020-15049, CVE-2020-8449, CVE-2020-8450, CVE-2020-24606, CVE-2020-25097, CVE-2020-11945, CVE-2020-14058
2021-09-21 22:10:21

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.138

Percentile

95.7%

JSON
Related for RHSA-2020:2041
nessus48centos1redhat3oraclelinux4openvas34osv9almalinux1rocky1amazon3gentoo1ubuntu3nvd3debiancve3alpinelinux3redhatcve3cvelist3cve3prion3veracode3ubuntucve3mageia3fedora4suse3debian5altlinux2cloudlinux1