Red Hat Security Advisory

RHSA-2020:4082

squid security update

Released 2020-09-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) squid-7:3.5.20-17.el7_9.4, squid-migration-script-7:3.5.20-17.el7_9.4
Red Hat Enterprise Linux Server Optional (v. 7) squid-sysvinit-7:3.5.20-17.el7_9.4
Red Hat Enterprise Linux Workstation (v. 7) squid-7:3.5.20-17.el7_9.4, squid-migration-script-7:3.5.20-17.el7_9.4
Red Hat Enterprise Linux Workstation Optional (v. 7) squid-sysvinit-7:3.5.20-17.el7_9.4

Fixes 7 records

TI-2020-06787 CVE-2020-8450 · GHSA-vrcq-r42v-wc44

An issue was discovered in Squid before 4.10.

HIGH 70

An issue was discovered in Squid before 4.10.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.7179 Published 2020-02-04 Partial fix CWE-131

TI-2020-11830 CVE-2020-15049

An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x…

MEDIUM 51

An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.05706 Published 2020-06-30 Partial fix CWE-444

TI-2019-09359 CVE-2019-12528 · GHSA-pjg3-3q79-q39r

An issue was discovered in Squid before 4.10.

MEDIUM 46

An issue was discovered in Squid before 4.10.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.10493 Published 2020-02-04 Partial fix

TI-2020-15082 CVE-2020-24606

Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service…

MEDIUM 45

Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response message.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.04961 Published 2020-08-24 Partial fix CWE-667

TI-2020-06786 CVE-2020-8449 · GHSA-rmc2-g977-jr5r

An issue was discovered in Squid before 4.10.

MEDIUM 44

An issue was discovered in Squid before 4.10.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08311 Published 2020-02-04 Partial fix CWE-668

TI-2020-12443 CVE-2020-15811

An issue was discovered in Squid before 4.13 and 5.x before 5.0.4.

LOW 36

An issue was discovered in Squid before 4.13 and 5.x before 5.0.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04069 Published 2020-09-02 Partial fix CWE-697

TI-2020-12442 CVE-2020-15810

An issue was discovered in Squid before 4.13 and 5.x before 5.0.4.

LOW 33

An issue was discovered in Squid before 4.13 and 5.x before 5.0.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02427 Published 2020-09-02 Partial fix CWE-444