VDB
BDU%3A2020-02396
BDU%3A2020-02396
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции HttpHeader::getAuth прокси-сервера Squid, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., Сообщество свободного программного обеспечения, Fedora Project, Red Hat Inc., Novell Inc., Squid Software Foundation | Ubuntu, Debian GNU/Linux, Fedora, Red Hat Enterprise Linux, OpenSUSE Leap, Squid | |
| Canonical Ltd., Сообщество свободного программного обеспечения, Fedora Project, Red Hat, Inc., Novell Inc., Squid Software Foundation | Ubuntu, Debian GNU/Linux, Fedora, Red Hat Enterprise Linux, OpenSUSE Leap, Squid |
Timeline
- May 29, 2020 CVE Published
- Sep 23, 2026 Security Advisory
- Sep 23, 2026 Security Advisory
References
- https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-12527.html?_ga=2.249264647.1237142402.1563167419-1618695258.1547637860 url
- http://www.squid-cache.org/Versions/v4/changesets/ advisory
- http://www.squid-cache.org/Versions/v4/changesets/squid-4-7f73e9c5d17664b882ed32590e6af310c247f320.patch advisory
- https://github.com/squid-cache/squid/commits/v4 advisory
- https://usn.ubuntu.com/4065-1/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPXN2CLAGN5QSQBTOV5IGVLDOQSRFNTZ/ advisory
- https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html advisory
- https://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html advisory
- https://access.redhat.com/security/cve/CVE-2019-12527 advisory
- https://security-tracker.debian.org/tracker/CVE-2019-12527 advisory