Home

CVE-2020-8450

Description

An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy.

Risk Information

Base Score
7.3
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score
Exploitation Probability
46.287

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM Security Guardium 10.5Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.6Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.1Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.2Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.3Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 11.0Windows
Web proxy cache server (USN-4289-1) squid_4.8-1ubuntu2.2_i386.debLinux
Web proxy cache server (USN-4289-1) squid_4.8-1ubuntu2.2_amd64.debLinux
Web proxy cache server (USN-4289-1) squid_3.5.27-1ubuntu1.5_i386.debLinux
Web proxy cache server (USN-4289-1) squid_3.5.27-1ubuntu1.5_amd64.debLinux
Web proxy cache server (USN-4289-1) squid_3.5.12-1ubuntu7.10_i386.debLinux
Web proxy cache server (USN-4289-1) squid_3.5.12-1ubuntu7.10_amd64.debLinux
squid security update(DSA-4682-1) squid_4.6-1+deb10u2_i386.debLinux
squid security update(DSA-4682-1) squid_4.6-1+deb10u2_amd64.debLinux
(RHSA-2020:4082) squid security update squid-3.5.20-17.el7_9.4.x86_64.rpmLinux
(RHSA-2020:4082) squid security update squid-migration-script-3.5.20-17.el7_9.4.x86_64.rpmLinux
(RHSA-2020:4082) squid security update squid-sysvinit-3.5.20-17.el7_9.4.x86_64.rpmLinux
(RHSA-2020:4743) squid:4 security, bug fix, and enhancement update squid-4.11-3.module+el8.3.0+7851+7808b5f9.x86_64.rpmLinux
(RHSA-2020:4743) squid:4 security, bug fix, and enhancement update squid-debugsource-4.11-3.module+el8.3.0+7851+7808b5f9.x86_64.rpmLinux
Squid update (ELSA-2020-4082) squid-3.5.20-17.el7_9.4.x86_64.rpmLinux
Squid-migration-script update (ELSA-2020-4082) squid-migration-script-3.5.20-17.el7_9.4.x86_64.rpmLinux
Squid-sysvinit update (ELSA-2020-4082) squid-sysvinit-3.5.20-17.el7_9.4.x86_64.rpmLinux
(CESA-2020:4082) squid security update squid-3.5.20-17.el7_9.4.x86_64.rpmLinux
(CESA-2020:4082) squid security update squid-migration-script-3.5.20-17.el7_9.4.x86_64.rpmLinux
(CESA-2020:4082) squid security update squid-sysvinit-3.5.20-17.el7_9.4.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234