Логотип exploitDog
bind:CVE-2019-12527
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-12527

Количество 11

Количество 11

ubuntu логотип

CVE-2019-12527

почти 6 лет назад

An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn't greater than the buffer, leading to a heap-based buffer overflow with user controlled data.

CVSS3: 8.8
EPSS: Средний
redhat логотип

CVE-2019-12527

почти 6 лет назад

An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn't greater than the buffer, leading to a heap-based buffer overflow with user controlled data.

CVSS3: 7.5
EPSS: Средний
nvd логотип

CVE-2019-12527

почти 6 лет назад

An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn't greater than the buffer, leading to a heap-based buffer overflow with user controlled data.

CVSS3: 8.8
EPSS: Средний
debian логотип

CVE-2019-12527

почти 6 лет назад

An issue was discovered in Squid 4.0.23 through 4.7. When checking Bas ...

CVSS3: 8.8
EPSS: Средний
rocky логотип

RLSA-2019:2593

почти 6 лет назад

Important: squid:4 security update

EPSS: Средний
github логотип

GHSA-8x4r-gffh-rx7f

около 3 лет назад

An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn't greater than the buffer, leading to a heap-based buffer overflow with user controlled data.

CVSS3: 8.8
EPSS: Средний
oracle-oval логотип

ELSA-2019-2593

почти 6 лет назад

ELSA-2019-2593: squid:4 security update (IMPORTANT)

EPSS: Низкий
fstec логотип

BDU:2020-02396

почти 6 лет назад

Уязвимость функции HttpHeader::getAuth прокси-сервера Squid, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

CVSS3: 8.8
EPSS: Средний
suse-cvrf логотип

openSUSE-SU-2019:2541-1

больше 5 лет назад

Security update for squid

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:2540-1

больше 5 лет назад

Security update for squid

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:2975-1

больше 5 лет назад

Security update for squid

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-12527

An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn't greater than the buffer, leading to a heap-based buffer overflow with user controlled data.

CVSS3: 8.8
16%
Средний
почти 6 лет назад
redhat логотип
CVE-2019-12527

An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn't greater than the buffer, leading to a heap-based buffer overflow with user controlled data.

CVSS3: 7.5
16%
Средний
почти 6 лет назад
nvd логотип
CVE-2019-12527

An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn't greater than the buffer, leading to a heap-based buffer overflow with user controlled data.

CVSS3: 8.8
16%
Средний
почти 6 лет назад
debian логотип
CVE-2019-12527

An issue was discovered in Squid 4.0.23 through 4.7. When checking Bas ...

CVSS3: 8.8
16%
Средний
почти 6 лет назад
rocky логотип
RLSA-2019:2593

Important: squid:4 security update

16%
Средний
почти 6 лет назад
github логотип
GHSA-8x4r-gffh-rx7f

An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn't greater than the buffer, leading to a heap-based buffer overflow with user controlled data.

CVSS3: 8.8
16%
Средний
около 3 лет назад
oracle-oval логотип
ELSA-2019-2593

ELSA-2019-2593: squid:4 security update (IMPORTANT)

почти 6 лет назад
fstec логотип
BDU:2020-02396

Уязвимость функции HttpHeader::getAuth прокси-сервера Squid, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

CVSS3: 8.8
16%
Средний
почти 6 лет назад
suse-cvrf логотип
openSUSE-SU-2019:2541-1

Security update for squid

больше 5 лет назад
suse-cvrf логотип
openSUSE-SU-2019:2540-1

Security update for squid

больше 5 лет назад
suse-cvrf логотип
SUSE-SU-2019:2975-1

Security update for squid

больше 5 лет назад

Уязвимостей на страницу