Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libecap | 0:1.0.1-2.module+el8.3.0+7819+eb7d4ef6 |
| Oracle Linux · 8 | libecap-devel | 0:1.0.1-2.module+el8.3.0+7819+eb7d4ef6 |
| Oracle Linux · 8 | squid | 7:4.11-3.module+el8.3.0+7819+eb7d4ef6 |
Vulnerabilities 18
-
Critical 9.9
An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggl…
-
High 8.6
Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CP…
-
Unscored —
An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can s…
-
Unscored —
An issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESICo…
-
Unscored —
An issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP request is made. This HT…
-
Unscored —
An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the r…
-
Unscored —CVE-2019-12526 EPSS 20%
An issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap-based buffer overflow. …
-
Unscored —CVE-2019-12528 EPSS 10%
An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive informa…
-
Unscored —
An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is config…
-
Unscored —CVE-2019-12854 EPSS 12%
Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with …
-
Unscored —
An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buff…
-
Unscored —
An issue was discovered in Squid 3.x and 4.x through 4.8 when the append_domain setting is used (because the appended c…
-
Unscored —
An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend…
-
Unscored —CVE-2019-18679 EPSS 43%
An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to i…
-
Unscored —
Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.…
-
Unscored —
An issue was discovered in Squid before 4.12 and 5.x before 5.0.3. Due to use of a potentially dangerous function, Squi…
-
Unscored —
An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests…
-
Unscored —CVE-2020-8450 EPSS 72%
An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer ov…