Red Hat Security AdvisoryRHSA-2020:1068
squid security and bug fix update
Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7) squid-7:3.5.20-15.el7, squid-migration-script-7:3.5.20-15.el7
- Red Hat Enterprise Linux Server Optional (v. 7) squid-sysvinit-7:3.5.20-15.el7
- Red Hat Enterprise Linux Workstation (v. 7) squid-7:3.5.20-15.el7, squid-migration-script-7:3.5.20-15.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) squid-sysvinit-7:3.5.20-15.el7
Fixes 3 records
Priority HIGH 66
The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.74477 · Published 2019-07-05 · Partial fix CWE-79
Priority MEDIUM 47
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Ser…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.12912 · Published 2018-02-09 · Partial fix CWE-476
Priority MEDIUM 44
The Squid Software Foundation Squid HTTP Caching Proxy version 3.0 to 3.5.27, 4.0 to 4.0.22 contains a Incorrect Pointer Handling vulnerability in ESI Response Processing that can result in Denial of Service for all clie…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.07928 · Published 2018-02-09 · Partial fix
THREATIST.IORead the docs