CVE-2014-9749
medium · 4Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access by leveraging a stale nonce, aka "Nonce replay vulnerability."
4
CVSS
11.4%
EPSS (exploit prob.)
96th
EPSS percentile
2015-11-06
Published
AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-264
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| squid-cache | squid | 3.4.4 |
| squid-cache | squid | 3.4.5 |
| squid-cache | squid | 3.4.6 |
| squid-cache | squid | 3.4.7 |
| squid-cache | squid | 3.4.8 |
| squid-cache | squid | 3.4.9 |
| squid-cache | squid | 3.4.10 |
| squid-cache | squid | 3.4.11 |
| squid-cache | squid | 3.4.12 |
| squid-cache | squid | 3.4.13 |
| squid-cache | squid | 3.5.0.1 |
| squid-cache | squid | 3.5.0.2 |
| squid-cache | squid | 3.5.0.3 |
| squid-cache | squid | 3.5.0.4 |
| squid-cache | squid | 3.5.1 |
| opensuse | opensuse | 13.1 |
| opensuse | opensuse | 13.2 |
Check a specific version with /api/v1/cve/match.
References
- http://bugs.squid-cache.org/show_bug.cgi?id=4066
- http://lists.opensuse.org/opensuse-updates/2015-10/msg00052.html
- http://www.openwall.com/lists/oss-security/2015/10/01/1
- http://www.openwall.com/lists/oss-security/2015/10/11/4
- http://www.openwall.com/lists/oss-security/2015/10/12/2
- http://bugs.squid-cache.org/show_bug.cgi?id=4066
- http://lists.opensuse.org/opensuse-updates/2015-10/msg00052.html
- http://www.openwall.com/lists/oss-security/2015/10/01/1
- http://www.openwall.com/lists/oss-security/2015/10/11/4
- http://www.openwall.com/lists/oss-security/2015/10/12/2
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2014-9749