ID de Prueba:	1.3.6.1.4.1.25623.1.0.144524
Categoría:	Denial of Service
Título:	Squid Security Update Advisory SQUID-2020:8 SQUID-2020:10
Resumen:	Squid is prone to multiple vulnerabilities.
Descripción:	Summary: Squid is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - HTTP(S) request smuggling (CVE-2020-15810) - HTTP(S) request splitting (CVE-2020-15811) Vulnerability Impact: These vulnerabilities may lead to cache poisoning. Affected Software/OS: Squid versions 2.5 - 3.5.28, 4.0 - 4.12 and 5.0.1 - 5.0.3. Solution: Update to version 4.13, 5.0.4 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-15810 Debian Security Information: DSA-4751 (Google Search) https://www.debian.org/security/2020/dsa-4751 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BMTFLVB7GLRF2CKGFPZ4G4R5DIIPHWI3/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BE6FKUN7IGTIR2MEEMWYDT7N5EJJLZI2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HJJDI7JQFGQLVNCKMVY64LAFMKERAOK7/ https://github.com/squid-cache/squid/security/advisories/GHSA-3365-q9qx-f98m https://lists.debian.org/debian-lts-announce/2020/10/msg00005.html SuSE Security Announcement: openSUSE-SU-2020:1346 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00012.html SuSE Security Announcement: openSUSE-SU-2020:1369 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00017.html https://usn.ubuntu.com/4477-1/ https://usn.ubuntu.com/4551-1/ Common Vulnerability Exposure (CVE) ID: CVE-2020-15811 https://github.com/squid-cache/squid/security/advisories/GHSA-c7p8-xqhm-49wv
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.