Skip to content
OpenAdvisories
Unscored DSA-4507-1 5 CVEs

squid - security update

Published Aug 24, 2019 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 squid 4.6-1+deb10u1

Vulnerabilities 5

  • Unscored —
    CVE-2019-12525 EPSS 24%

    An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authe…

  • Unscored —
    CVE-2019-12527 EPSS 50%

    An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid…

  • Unscored —

    An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is config…

  • Unscored —
    CVE-2019-12854 EPSS 12%

    Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with …

  • Unscored —
    CVE-2019-13345 EPSS 74%

    The cachemgr.cgi web module of Squid through 4.7 has XSS via the user_name or auth parameter.