Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-12854

Опубликовано: 15 авг. 2019
Источник: ubuntu
Приоритет: low
EPSS Средний
CVSS2: 5
CVSS3: 7.5

Описание

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it.

РелизСтатусПримечание
bionic

DNE

devel

not-affected

4.8-1ubuntu2
disco

released

4.4-1ubuntu2.3
eoan

not-affected

4.8-1ubuntu2
esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty/esm

DNE

upstream

released

4.8-1
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

code not present
devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

not-affected

code not present
esm-infra/xenial

not-affected

code not present
precise/esm

not-affected

code not present
trusty/esm

DNE

upstream

not-affected

debian: Vulnerable code only in 4.x series

Показывать по

EPSS

Процентиль: 97%
0.44493
Средний

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 4.3
redhat
почти 6 лет назад

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it.

CVSS3: 7.5
nvd
почти 6 лет назад

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it.

CVSS3: 7.5
debian
почти 6 лет назад

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4. ...

CVSS3: 7.5
github
около 3 лет назад

Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it.

CVSS3: 7.5
fstec
почти 6 лет назад

Уязвимость компонента cachemgr.cgi прокси-сервера Squid, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 97%
0.44493
Средний

5 Medium

CVSS2

7.5 High

CVSS3