Summary
Lyu discovered that Squid incorrectly handled WCCP protocol data. A remote
attacker could use this issue to cause Squid to crash, resulting in a
denial of service, or possibly obtain sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | squid3 | 3.5.27-1ubuntu1.12 |
| Ubuntu · 20.04 LTS 20.04:LTS | squid | 4.10-1ubuntu1.5 |
Vulnerabilities 1
-
Low 3.7CVE-2021-28116 EPSS 13%
Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bo…
References
-
report
https://ubuntu.com/security/CVE-2021-28116