Description
An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by earlier security filters.
Metrics
CVSS 3.1 7.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00012.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00010.htmlMailing List, Third Party Advisory
- http://www.squid-cache.org/Advisories/SQUID-2020_1.txtPatch, Vendor Advisory
- http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2020_1.patchPatch, Vendor Advisory
- http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-8e657e835965c3a011375feaa0359921c5b3e2dd.patchPatch, Vendor Advisory
- http://www.squid-cache.org/Versions/v4/changesets/SQUID-2020_1.patchPatch, Vendor Advisory
- http://www.squid-cache.org/Versions/v4/changesets/squid-4-b3a0719affab099c684f1cd62b79ab02816fa962.patchPatch, Vendor Advisory
- http://www.squid-cache.org/Versions/v4/changesets/squid-4-d8e4715992d0e530871519549add5519cbac0598.patchPatch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2020/07/msg00009.htmlMailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G6W2IQ7QV2OGREFFUBNVZIDD3RJBDE4R/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TSU6SPANL27AGK5PCGBJOKG4LUWA555J/
- https://security.gentoo.org/glsa/202003-34Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210304-0002/Third Party Advisory
- https://usn.ubuntu.com/4289-1/Third Party Advisory
- https://www.debian.org/security/2020/dsa-4682Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00012.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00010.htmlMailing List, Third Party Advisory
- http://www.squid-cache.org/Advisories/SQUID-2020_1.txtPatch, Vendor Advisory
- http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2020_1.patchPatch, Vendor Advisory
- http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-8e657e835965c3a011375feaa0359921c5b3e2dd.patchPatch, Vendor Advisory
- http://www.squid-cache.org/Versions/v4/changesets/SQUID-2020_1.patchPatch, Vendor Advisory
- http://www.squid-cache.org/Versions/v4/changesets/squid-4-b3a0719affab099c684f1cd62b79ab02816fa962.patchPatch, Vendor Advisory
- http://www.squid-cache.org/Versions/v4/changesets/squid-4-d8e4715992d0e530871519549add5519cbac0598.patchPatch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2020/07/msg00009.htmlMailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G6W2IQ7QV2OGREFFUBNVZIDD3RJBDE4R/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TSU6SPANL27AGK5PCGBJOKG4LUWA555J/
- https://security.gentoo.org/glsa/202003-34Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210304-0002/Third Party Advisory
- https://usn.ubuntu.com/4289-1/Third Party Advisory
- https://www.debian.org/security/2020/dsa-4682Third Party Advisory
Timeline
- Published
- Feb 4, 2020
- Last modified
- Jun 17, 2026
- NVD status
- Modified