PT-2020-2568
CVE-2020-8450
·
Published
2020-02-04
·
Updated
2021-07-21
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Squid versions prior to 4.10
Description
An issue was discovered due to incorrect buffer management, allowing a remote client to cause a buffer overflow in a Squid instance acting as a reverse proxy. This can potentially impact the confidentiality, integrity, and availability of protected information.
Recommendations
For versions prior to 4.10, update to version 4.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the reverse proxy functionality until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾