CVE-2019-18679
high · 7.5An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to information disclosure when processing HTTP Digest Authentication. Nonce tokens contain the raw byte value of a pointer that sits within heap memory allocation. This information reduces ASLR protections and may aid attackers isolating memory areas to target for remote code execution attacks.
7.5
CVSS
41.0%
EPSS (exploit prob.)
99th
EPSS percentile
2019-11-26
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| squid-cache | squid | >= 2.0, <= 2.7 |
| squid-cache | squid | >= 3.0, <= 3.5.28 |
| squid-cache | squid | >= 4.0, <= 4.8 |
| squid-cache | squid | 2.7 |
| squid-cache | squid | 2.7 |
| squid-cache | squid | 2.7 |
| squid-cache | squid | 2.7 |
| squid-cache | squid | 2.7 |
| squid-cache | squid | 2.7 |
| squid-cache | squid | 2.7 |
| squid-cache | squid | 2.7 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 19.04 |
| canonical | ubuntu_linux | 19.10 |
| debian | debian_linux | 8.0 |
| fedoraproject | fedora | 30 |
| fedoraproject | fedora | 31 |
Check a specific version with /api/v1/cve/match.
References
- http://www.squid-cache.org/Advisories/SQUID-2019_11.txt
- http://www.squid-cache.org/Versions/v4/changesets/squid-4-671ba97abe929156dc4c717ee52ad22fba0f7443.patch
- https://bugzilla.suse.com/show_bug.cgi?id=1156324
- https://github.com/squid-cache/squid/pull/491
- https://lists.debian.org/debian-lts-announce/2019/12/msg00011.html
- https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTM74TU2BSLT5B3H4F3UDW53672NVLMC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEMOYTMCCFWK5NOXSXEIH5D2VGWVXR67/
- https://security.gentoo.org/glsa/202003-34
- https://usn.ubuntu.com/4213-1/
- https://www.debian.org/security/2020/dsa-4682
- http://www.squid-cache.org/Advisories/SQUID-2019_11.txt
- http://www.squid-cache.org/Versions/v4/changesets/squid-4-671ba97abe929156dc4c717ee52ad22fba0f7443.patch
- https://bugzilla.suse.com/show_bug.cgi?id=1156324
- https://github.com/squid-cache/squid/pull/491
- https://lists.debian.org/debian-lts-announce/2019/12/msg00011.html
- https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTM74TU2BSLT5B3H4F3UDW53672NVLMC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEMOYTMCCFWK5NOXSXEIH5D2VGWVXR67/
- https://security.gentoo.org/glsa/202003-34
- https://usn.ubuntu.com/4213-1/
- https://www.debian.org/security/2020/dsa-4682
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-18679