Test ID:	1.3.6.1.4.1.25623.1.0.143454
Category:	Web Servers
Title:	Squid Multiple Security Update Advisories (SQUID-2020:1, SQUID-2020:2, SQUID-2020:3)
Summary:	Squid is prone to multiple vulnerabilities.
Description:	Summary: Squid is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2019-12528: Information Disclosure issue in FTP Gateway - CVE-2020-8449, CVE-2020-8450: Improper Input Validation issues in HTTP Request processing - CVE-2020-8517: Buffer Overflow issue in ext_lm_group_acl helper Affected Software/OS: Squid versions 2.x, 3.x through 3.5.28 and 4.x through 4.9. Solution: Update to version 4.10 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-12528 Debian Security Information: DSA-4682 (Google Search) https://www.debian.org/security/2020/dsa-4682 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TSU6SPANL27AGK5PCGBJOKG4LUWA555J/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G6W2IQ7QV2OGREFFUBNVZIDD3RJBDE4R/ https://security.gentoo.org/glsa/202003-34 https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html SuSE Security Announcement: openSUSE-SU-2020:0307 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00012.html SuSE Security Announcement: openSUSE-SU-2020:0606 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00010.html SuSE Security Announcement: openSUSE-SU-2020:0623 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00018.html https://usn.ubuntu.com/4289-1/ Common Vulnerability Exposure (CVE) ID: CVE-2020-8449 http://www.squid-cache.org/Advisories/SQUID-2020_1.txt http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2020_1.patch http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-8e657e835965c3a011375feaa0359921c5b3e2dd.patch http://www.squid-cache.org/Versions/v4/changesets/SQUID-2020_1.patch http://www.squid-cache.org/Versions/v4/changesets/squid-4-b3a0719affab099c684f1cd62b79ab02816fa962.patch http://www.squid-cache.org/Versions/v4/changesets/squid-4-d8e4715992d0e530871519549add5519cbac0598.patch Common Vulnerability Exposure (CVE) ID: CVE-2020-8450 Common Vulnerability Exposure (CVE) ID: CVE-2020-8517 http://www.squid-cache.org/Advisories/SQUID-2020_3.txt http://www.squid-cache.org/Versions/v4/changesets/squid-4-6982f1187a26557e582172965e266f544ea562a5.patch
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.