Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libecapalma-upgrade-libecap-develalma-upgrade-squid | May 13, 2022 | Mar 9, 2021 | |
| Alpine Linux | alpine-linux-upgrade-squid | Mar 26, 2024 | Mar 9, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-squidamazon-linux-ami-2-upgrade-squid-debuginfoamazon-linux-ami-2-upgrade-squid-migration-scriptamazon-linux-ami-2-upgrade-squid-sysvinit | Sep 28, 2023 | Mar 9, 2021 | |
| Centos_linux | — | centos-upgrade-libecapcentos-upgrade-libecap-debuginfocentos-upgrade-libecap-debugsourcecentos-upgrade-libecap-develcentos-upgrade-squidcentos-upgrade-squid-debuginfocentos-upgrade-squid-debugsource | May 13, 2022 | Mar 9, 2021 |
| Debian | debian-upgrade-squid | Jun 29, 2022 | Mar 9, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-net-proxy-squid | May 28, 2021 | Mar 9, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-squidhuawei-euleros-2_0_sp3-upgrade-squid-migration-script | May 25, 2022 | Mar 9, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-squid | Jun 17, 2022 | Mar 9, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-squid | Dec 28, 2021 | Mar 9, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-web-proxy-squid-4-15-11-4-39-0-1-107-0 | Nov 17, 2021 | Mar 9, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-libecaporacle-linux-upgrade-libecap-develoracle-linux-upgrade-squid | May 18, 2022 | Feb 9, 2021 |
| Redhat_linux | redhat-upgrade-libecapredhat-upgrade-libecap-debuginforedhat-upgrade-libecap-debugsourceredhat-upgrade-libecap-develredhat-upgrade-squidredhat-upgrade-squid-debuginforedhat-upgrade-squid-debugsource | May 13, 2022 | Mar 9, 2021 | |
| Rocky_linux | rocky-upgrade-libecaprocky-upgrade-libecap-debuginforocky-upgrade-libecap-debugsourcerocky-upgrade-libecap-develrocky-upgrade-squidrocky-upgrade-squid-debuginforocky-upgrade-squid-debugsource | Mar 5, 2024 | Mar 9, 2021 | |
| Suse | — | suse-upgrade-squid | Oct 12, 2021 | Mar 9, 2021 |
| Ubuntu | ubuntu-upgrade-squid | Oct 6, 2021 | Mar 9, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 9, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub