CVE-2022-41317
An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensi...
Original description
The description as published by the source.
An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2022-41317 squid Fixed in: 5.7-r0
- Debian DEBIAN-CVE-2022-41317 squid Fixed in: 4.13-10+deb11u2
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web squid-cache.org
- web squid-cache.org
- web openwall.com