PT-2020-2568

CVE-2020-8450

·

Published

2020-02-04

·

Updated

2021-07-21

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Squid versions prior to 4.10
Description An issue was discovered due to incorrect buffer management, allowing a remote client to cause a buffer overflow in a Squid instance acting as a reverse proxy. This can potentially impact the confidentiality, integrity, and availability of protected information.
Recommendations For versions prior to 4.10, update to version 4.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the reverse proxy functionality until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2020:4743
ALT-PU-2020-1479
ALT-PU-2020-1494
CESA-2020_4082
CESA-2020_4743
DLA-2278-1
DSA-4682-1
MGASA-2020-0106
OPENSUSE-SU-2020:0307-1
OPENSUSE-SU-2020_0307-1
OPENSUSE-SU-2020:0606-1
OPENSUSE-SU-2020_0606-1
RHSA-2020:4082
RHSA-2020_4082
RHSA-2020:4743
RHSA-2020_4743
RLSA-2020:4743
SUSE-SU-2020:0487-1
SUSE-SU-2020:0493-1
SUSE-SU-2020:0661-1
SUSE-SU-2020:14460-1
USN-4289-1
Found an issue in the description? Have something to add? Feel free to write us 👾