VDB
GCVE-110-MAGEIA-2020-187
GCVE-110-MAGEIA-2020-187
Advisory Published
Updated squid packages fix security vulnerability:
Due to an integer overflow bug Squid is vulnerable to credential replay
and remote code execution attacks against HTTP Digest Authentication tokens.
When memory pooling is used this problem allows a remote client to replay a
sniffed Digest Authentication nonce to gain access to resources that are
otherwise forbidden. When memory pooling is disabled this problem allows a
remote client to perform remote code execution through the free'd nonce
credentials (CVE-2020-11945).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | squid | 0 (affected), 4.11-1.mga7 (unaffected) | — |
Browse GCVE Records
21,084 records in the GCVE database · Updated October 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.