CVE-2022-41317
An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensi...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposure of Sensitive Information about clients using the proxy via an HTTPS request to an internal cache manager URL. This is fixed in 5.7.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-41317 squid Corrigé dans: 5.7-r0
- Debian DEBIAN-CVE-2022-41317 squid Corrigé dans: 4.13-10+deb11u2
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web squid-cache.org
- web squid-cache.org
- web openwall.com