CVE-2019-18679

Name of the Vulnerable Software and Affected Versions Squid versions 2.x through 4.8

Description The issue is related to incorrect data management in HTTP Digest Authentication processing, leading to information disclosure. Nonce tokens contain raw byte values of pointers within heap memory allocation, which reduces ASLR protections and may aid attackers in isolating memory areas for remote code execution attacks. This vulnerability allows a remote attacker to access confidential data.

Recommendations For Squid versions 2.x through 4.8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.