Test Kennung:	1.3.6.1.4.1.25623.1.0.144212
Kategorie:	Web Servers
Titel:	Squid Security Update Advisory (SQUID-2020:7)
Zusammenfassung:	Squid is prone to a cache poisoning vulnerability.
Beschreibung:	Summary: Squid is prone to a cache poisoning vulnerability. Vulnerability Insight: Due to incorrect input validation Squid is vulnerable to a Request Smuggling and Poisoning attack against the HTTP cache. Affected Software/OS: Squid versions 2.0 through 2.STABLE9, 3.0 through 3.5.28, 4.0 through 4.11 and 5.0.1 through 5.0.2. Solution: Update to version 4.12, 5.0.3 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-15049 Debian Security Information: DSA-4732 (Google Search) https://www.debian.org/security/2020/dsa-4732 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3RG5FGSTCAYVIJPJHIY3MRZ7NFT6HDO7/ http://www.squid-cache.org/Versions/v4/changesets/squid-4-ea12a34d338b962707d5078d6d1fc7c6eb119a22.patch http://www.squid-cache.org/Versions/v5/changesets/squid-5-485c9a7bb1bba88754e07ad0094647ea57a6eb8d.patch https://lists.debian.org/debian-lts-announce/2020/10/msg00005.html SuSE Security Announcement: openSUSE-SU-2020:1346 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00012.html SuSE Security Announcement: openSUSE-SU-2020:1369 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00017.html https://usn.ubuntu.com/4551-1/
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.