Описание
Moderate: squid:4 security, bug fix, and enhancement update
Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.
The following packages have been upgraded to a later upstream version: squid (4.11). (BZ#1829467)
Security Fix(es):
-
squid: Improper input validation in request allows for proxy manipulation (CVE-2019-12520)
-
squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash (CVE-2019-12521)
-
squid: Improper input validation in URI processor (CVE-2019-12523)
-
squid: Improper access restriction in url_regex may lead to security bypass (CVE-2019-12524)
-
squid: Heap overflow issue in URN processing (CVE-2019-12526)
-
squid: Information Disclosure issue in FTP Gateway (CVE-2019-12528)
-
squid: Out of bounds read in Proxy-Authorization header causes DoS (CVE-2019-12529)
-
squid: Denial of service in cachemgr.cgi (CVE-2019-12854)
-
squid: Buffer overflow in URI processor (CVE-2019-18676)
-
squid: Cross-Site Request Forgery issue in HTTP Request processing (CVE-2019-18677)
-
squid: HTTP Request Splitting issue in HTTP message processing (CVE-2019-18678)
-
squid: Information Disclosure issue in HTTP Digest Authentication (CVE-2019-18679)
-
squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour (CVE-2019-18860)
-
squid: Improper input validation issues in HTTP Request processing (CVE-2020-8449)
-
squid: Buffer overflow in reverse-proxy configurations (CVE-2020-8450)
-
squid: DoS in TLS handshake (CVE-2020-14058)
-
squid: Request smuggling and poisoning attack against the HTTP cache (CVE-2020-15049)
-
squid: Improper input validation could result in a DoS (CVE-2020-24606)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.
Затронутые продукты
Rocky Linux 8
Ссылки на источники
Исправления
- Red Hat - 1730523
- Red Hat - 1730528
- Red Hat - 1770349
- Red Hat - 1770356
- Red Hat - 1770360
- Red Hat - 1770365
- Red Hat - 1770371
- Red Hat - 1770375
- Red Hat - 1798534
- Red Hat - 1798540
- Red Hat - 1798552
- Red Hat - 1817121
- Red Hat - 1827558
- Red Hat - 1827562
- Red Hat - 1827570
- Red Hat - 1852550
- Red Hat - 1852554
- Red Hat - 1871705
Связанные уязвимости
ELSA-2020-4743: squid:4 security, bug fix, and enhancement update (MODERATE)
An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can serve up a response. It does this by making a MD5 hash of the absolute URL of the request. If found, it servers the request. The absolute URL can include the decoded UserInfo (username and password) for certain protocols. This decoded info is prepended to the domain. This allows an attacker to provide a username that has special characters to delimit the domain, and treat the rest of the URL as a path or query string. An attacker could first make a request to their domain using an encoded username, then when a request for the target domain comes in that decodes to the exact URL, it will serve the attacker's HTML instead of the real HTML. On Squid servers that also act as reverse proxies, this allows an attacker to gain access to features that only reverse proxies can use, such as ESI.