Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-8449

Опубликовано: 04 фев. 2020
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by earlier security filters.

РелизСтатусПримечание
bionic

DNE

devel

released

4.9-2ubuntu4
eoan

released

4.8-1ubuntu2.2
esm-infra-legacy/trusty

DNE

esm-infra/focal

released

4.9-2ubuntu4
focal

released

4.9-2ubuntu4
groovy

released

4.9-2ubuntu4
hirsute

released

4.9-2ubuntu4
precise/esm

DNE

trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

released

3.5.27-1ubuntu1.5
devel

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

released

3.5.27-1ubuntu1.5
esm-infra/focal

DNE

esm-infra/xenial

released

3.5.12-1ubuntu7.10
focal

DNE

groovy

DNE

hirsute

DNE

Показывать по

EPSS

Процентиль: 87%
0.03294
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 4.8
redhat
около 6 лет назад

An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by earlier security filters.

CVSS3: 7.5
nvd
около 6 лет назад

An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by earlier security filters.

CVSS3: 7.5
debian
около 6 лет назад

An issue was discovered in Squid before 4.10. Due to incorrect input v ...

github
больше 3 лет назад

An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by earlier security filters.

CVSS3: 7.5
fstec
около 6 лет назад

Уязвимость прокси-сервера Squid, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 87%
0.03294
Низкий

5 Medium

CVSS2

7.5 High

CVSS3