vulnerability

Alpine Linux: CVE-2019-18679: Exposure of Sensitive Information to an Unauthorized Actor

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

Nov 26, 2019

Added

Jan 19, 2021

Modified

Jun 18, 2026

Description

An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to information disclosure when processing HTTP Digest Authentication. Nonce tokens contain the raw byte value of a pointer that sits within heap memory allocation. This information reduces ASLR protections and may aid attackers isolating memory areas to target for remote code execution attacks.

Solution

alpine-linux-upgrade-squid

References

CVE-2019-18679
https://attackerkb.com/topics/CVE-2019-18679
https://security.alpinelinux.org/vuln/CVE-2019-18679
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8395
CWE-200
EUVD-EUVD-2019-8395

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report