Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-18679

An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Due to incorrect data management, it is vulnerable to information disclosure when processing HTTP Digest Authentication. Nonce tokens contain the raw byte value of a pointer that sits within heap memory allocation. This information reduces ASLR protections and may aid attackers isolating memory areas to target for remote code execution attacks.

Published

2019-11-26T17:15:13.047

Last Modified

2024-11-21T04:33:31.133

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application squid-cache squid ≤ 2.7 Yes
Application squid-cache squid ≤ 3.5.28 Yes
Application squid-cache squid ≤ 4.8 Yes
Application squid-cache squid 2.7 Yes
Application squid-cache squid 2.7 Yes
Application squid-cache squid 2.7 Yes
Application squid-cache squid 2.7 Yes
Application squid-cache squid 2.7 Yes
Application squid-cache squid 2.7 Yes
Application squid-cache squid 2.7 Yes
Application squid-cache squid 2.7 Yes
Operating System canonical ubuntu_linux 16.04 Yes
Operating System canonical ubuntu_linux 18.04 Yes
Operating System canonical ubuntu_linux 19.04 Yes
Operating System canonical ubuntu_linux 19.10 Yes
Operating System debian debian_linux 8.0 Yes
Operating System fedoraproject fedora 30 Yes
Operating System fedoraproject fedora 31 Yes
References