Non évaluée
Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data...
CVE-2021-28116
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2021-28116 squid Corrigé dans: 4.17-r0
- Debian DEBIAN-CVE-2021-28116 squid Corrigé dans: 5.2-1
- Ubuntu UBUNTU-CVE-2021-28116 squid3
Description d'origine La description telle que publiée par la source (souvent en anglais).
Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory openwall.com
- advisory squid-cache.org
- advisory github.com
- advisory security.gentoo.org
- advisory debian.org
- advisory zerodayinitiative.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org