Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-18676 →
DEBIAN-CVE-2019-18676
An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in Squid 3.x and 4.x through 4.8. Due to incorrect input validation, there is a heap-based buffer overflow that can result in Denial of Service to all clients using the proxy. Severity is high due to this vulnerability occurring before normal security checks; any remote client that can reach the proxy port can trivially perform the attack via a crafted URI scheme.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
squid
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-1"}]}]
Debian:13
squid
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-1"}]}]
Debian:14
squid
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-1"}]}]
Références
- advisory security-tracker.debian.org