{"id":"CVE-2019-18678","aliases":["ALSA-2020:4743","CLSA-2026-1776878817","CLSA-2026-1776879277","CLSA-2026-1777539404","CLSA-2026-1777541147","DEBIAN-CVE-2019-18678","DLA-2028-1","DLA-2278-1","DSA-4682-1","EUVD-2019-8394","GHSA-jvgf-c7c2-w98p","MGASA-2019-0382","RHSA-2020:4743","RLSA-2020:4743","SUSE-SU-2019:2975-1","SUSE-SU-2019:3067-1","SUSE-SU-2020:0661-1","SUSE-SU-2020:14460-1","UBUNTU-CVE-2019-18678","USN-4213-1","openSUSE-SU-2019:2540-1","openSUSE-SU-2019:2541-1","openSUSE-SU-2024:11403-1"],"status":"published","title":"An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP...","description":"An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches (between a client and Squid) with attacker-controlled content at arbitrary URLs. Effects are isolated to software between the attacker client and Squid. There are no effects on Squid itself, nor on any upstream servers. The issue is related to a request header containing whitespace between a header name and a colon.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.062,"percentile":0.9356,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-444"],"published":"2019-11-14T16:02:41Z","modified":"2026-10-29T11:00:17Z","fixes":[{"ecosystem":"Debian:12","package":"squid","fixed_in":["4.9-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"squid","fixed_in":["4.9-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"squid","fixed_in":["4.9-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"squid3","fixed_in":["3.5.12-1ubuntu7.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"squid3","fixed_in":["3.5.27-1ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"squid","fixed_in":["4.9-2ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":18},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-2.module_el8.6.0+2741+01592ae8"}]}],"bundled":18},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.tuxcare.els17"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.23-30.el6.tuxcare.els17"}]}],"bundled":13},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-16.el6.tuxcare.els13"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"squid34","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.4.14-16.el6.tuxcare.els13"}]}],"bundled":12},{"source":"osv","ecosystem":"Debian:12","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.8-6+deb8u9"}]}],"versions":["3.4.8-6","3.4.8-6+deb8u1","3.4.8-6+deb8u2","3.4.8-6+deb8u2~bpo70+1","3.4.8-6+deb8u3","3.4.8-6+deb8u4","3.4.8-6+deb8u5","3.4.8-6+deb8u6","3.4.8-6+deb8u7","3.4.8-6+deb8u8"],"bundled":4},{"source":"osv","ecosystem":"Debian:9","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.23-5+deb9u2"}]}],"versions":["3.5.23-5","3.5.23-5+deb9u1"],"bundled":19},{"source":"osv","ecosystem":"Debian:10","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u2"}]}],"versions":["4.6-1","4.6-1+deb10u1"],"bundled":14},{"source":"osv","ecosystem":"Mageia:7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-1.mga7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libecap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.1.0+4044+36416a77"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-3.module+el8.3.0+7851+7808b5f9"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-3.module+el8.3.0+7851+7808b5f9"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"squid-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.11-3.module+el8.3.0+7851+7808b5f9"}]}],"bundled":18},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libecap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-2.module+el8.4.0+404+316a0dc5"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-5.11.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-5.11.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-4.3.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-4.3.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.21-26.20.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-8.16.37.12.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.23-8.16.37.12.1"}]}],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.9"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.4"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-2ubuntu1"}]}],"versions":["4.8-1ubuntu2","4.8-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.9"}]}],"versions":["3.3.8-1ubuntu16","3.3.8-1ubuntu17","3.5.12-1ubuntu6","3.5.12-1ubuntu7","3.5.12-1ubuntu7.1","3.5.12-1ubuntu7.2","3.5.12-1ubuntu7.3","3.5.12-1ubuntu7.4","3.5.12-1ubuntu7.5","3.5.12-1ubuntu7.6","3.5.12-1ubuntu7.7","3.5.12-1ubuntu7.8"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"squid3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.4"}]}],"versions":["3.5.23-5ubuntu1","3.5.23-5ubuntu2","3.5.27-1ubuntu1","3.5.27-1ubuntu1.1","3.5.27-1ubuntu1.2","3.5.27-1ubuntu1.3"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-lp150.13.1"}]}],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-lp151.2.7.1"}]}],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"squid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16-1.5"}]}],"bundled":40}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"squid-cache","product":"squid"}],"references":[{"url":"https://github.com/squid-cache/squid/pull/445","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1156323","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"http://www.squid-cache.org/Versions/v4/changesets/squid-4-671ba97abe929156dc4c717ee52ad22fba0f7443.patch","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","advisory"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2019_10.txt","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web","article","report"]},{"url":"https://usn.ubuntu.com/4213-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEMOYTMCCFWK5NOXSXEIH5D2VGWVXR67/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTM74TU2BSLT5B3H4F3UDW53672NVLMC/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/12/msg00011.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202003-34","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4682","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18678","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTM74TU2BSLT5B3H4F3UDW53672NVLMC/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UEMOYTMCCFWK5NOXSXEIH5D2VGWVXR67/"},{"url":"https://github.com/advisories/GHSA-jvgf-c7c2-w98p"},{"url":"https://errata.almalinux.org/8/ALSA-2020-4743.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-12520","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-12521","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-12523","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-12524","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-12526","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-12528","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-12529","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-12854","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-18676","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-18677","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-18678","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-18679","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-18860","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-14058","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-15049","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-24606","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-8449","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-8450","tags":["report"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1776878817.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000027","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12520","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12523","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12526","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12528","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12529","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13345","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18676","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18677","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18679","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18860","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1776879277.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1777539404.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1777541147.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-18678","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0382.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25812","tags":["report"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2019_7.txt","tags":["web","article"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2019_8.txt","tags":["web","article"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2019_9.txt","tags":["web","article"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2019_11.txt","tags":["web","article"]},{"url":"https://lists.opensuse.org/opensuse-updates/2019-11/msg00119.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4743","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1827558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1827562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1827570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1852550","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1852554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1871705","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4743.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12520","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12520","tags":["advisory"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2019_4.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12521","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12521","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12521","tags":["advisory"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2019_12.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12523","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12523","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12524","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12524","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12524","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12526","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12526","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12528","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12528","tags":["advisory"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2020_2.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12529","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12529","tags":["advisory"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2019_2.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12854","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12854","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12854","tags":["advisory"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2019_1.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-18676","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18676","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-18677","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18677","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-18678","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18678","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-18679","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18679","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-18860","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18860","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/pull/504","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8449","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8449","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8450","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8450","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8450","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14058","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14058","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14058","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-qvf6-485q-vm57","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-15049","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15049","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-qf3v-rc95-96j5","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-24606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-24606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24606","tags":["advisory"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-vvj7-xjgq-g2jg","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2020:4743","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192975-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1133089","tags":["report"]},{"url":"https://bugzilla.suse.com/1140738","tags":["report"]},{"url":"https://bugzilla.suse.com/1141329","tags":["report"]},{"url":"https://bugzilla.suse.com/1141330","tags":["report"]},{"url":"https://bugzilla.suse.com/1141332","tags":["report"]},{"url":"https://bugzilla.suse.com/1141442","tags":["report"]},{"url":"https://bugzilla.suse.com/1156323","tags":["report"]},{"url":"https://bugzilla.suse.com/1156324","tags":["report"]},{"url":"https://bugzilla.suse.com/1156326","tags":["report"]},{"url":"https://bugzilla.suse.com/1156328","tags":["report"]},{"url":"https://bugzilla.suse.com/1156329","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3688","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193067-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200661-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1162687","tags":["report"]},{"url":"https://bugzilla.suse.com/1162689","tags":["report"]},{"url":"https://bugzilla.suse.com/1162691","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8517","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014460-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1167373","tags":["report"]},{"url":"https://bugzilla.suse.com/1169659","tags":["report"]},{"url":"https://bugzilla.suse.com/1170313","tags":["report"]},{"url":"https://bugzilla.suse.com/1170423","tags":["report"]},{"url":"https://bugzilla.suse.com/1173304","tags":["report"]},{"url":"https://bugzilla.suse.com/1173455","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15049","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-18678","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4213-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-12523","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12526","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12854","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-18676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-18677","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-18679","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5B7VIBHEUXO2VYU6NZTEL6I7K4WUKD7G/#5B7VIBHEUXO2VYU6NZTEL6I7K4WUKD7G","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2PLGSQEPKZX62EREA7UHDNEMHR3Z23A6/#2PLGSQEPKZX62EREA7UHDNEMHR3Z23A6","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-24606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31806","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-18678","description":"An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches (between a client and Squid) with attacker-controlled content at arbitrary URLs. Effects are isolated to software between the attacker client and Squid. There are no effects on Squid itself, nor on any upstream servers. The issue is related to a request header containing whitespace between a header name and a colon.","status":"published","published":"2019-11-26T16:15:42Z","modified":"2024-08-05T02:02:38.289Z","updated_at":"2026-11-02T14:32:23.803059Z"}],"euvd":[{"id":"EUVD-2019-8394","description":"An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches (between a client and Squid) with attacker-controlled content at arbitrary URLs. Effects are isolated to software between the attacker client and Squid. There are no effects on Squid itself, nor on any upstream servers. The issue is related to a request header containing whitespace between a header name and a colon.","status":"published","published":"2019-11-26T16:15:42Z","modified":"2024-08-05T02:02:38Z","updated_at":"2026-11-03T02:40:27.733219Z"}],"ghsa":[{"id":"GHSA-jvgf-c7c2-w98p","title":"An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP...","description":"An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches (between a client and Squid) with attacker-controlled content at arbitrary URLs. Effects are isolated to software between the attacker client and Squid. There are no effects on Squid itself, nor on any upstream servers. The issue is related to a request header containing whitespace between a header name and a colon.","status":"published","published":"2022-05-24T17:02:14Z","modified":"2023-01-28T05:07:49Z","updated_at":"2026-11-02T14:44:34.529278Z"}],"nvd":[{"id":"CVE-2019-18678","description":"An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches (between a client and Squid) with attacker-controlled content at arbitrary URLs. Effects are isolated to software between the attacker client and Squid. There are no effects on Squid itself, nor on any upstream servers. The issue is related to a request header containing whitespace between a header name and a colon.","status":"published","published":"2019-11-26T17:15:12.983Z","modified":"2026-06-17T02:25:17.117Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T14:05:38.993437Z"}],"osv":[{"id":"CVE-2019-18678","description":"An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches (between a client and Squid) with attacker-controlled content at arbitrary URLs. Effects are isolated to software between the attacker client and Squid. There are no effects on Squid itself, nor on any upstream servers. The issue is related to a request header containing whitespace between a header name and a colon.","status":"published","published":"2019-11-26T17:15:12.983Z","modified":"2026-10-20T10:47:34.138670115Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-18678","description":"An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches (between a client and Squid) with attacker-controlled content at arbitrary URLs. Effects are isolated to software between the attacker client and Squid. There are no effects on Squid itself, nor on any upstream servers. The issue is related to a request header containing whitespace between a header name and a colon.","status":"published","published":"2019-11-26T17:15:12.983Z","modified":"2026-09-21T07:02:32.298664595Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"RHSA-2020:4743","title":"Red Hat Security Advisory: squid:4 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T04:22:06Z","modified":"2026-07-04T10:01:03Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RLSA-2020:4743","title":"Moderate: squid:4 security, bug fix, and enhancement update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nThe following packages have been upgraded to a later upstream version: squid (4.11). (BZ#1829467)\n\nSecurity Fix(es):\n\n* squid: Improper input validation in request allows for proxy manipulation (CVE-2019-12520)\n\n* squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash (CVE-2019-12521)\n\n* squid: Improper input validation in URI processor (CVE-2019-12523)\n\n* squid: Improper access restriction in url_regex may lead to security bypass (CVE-2019-12524)\n\n* squid: Heap overflow issue in URN processing (CVE-2019-12526)\n\n* squid: Information Disclosure issue in FTP Gateway (CVE-2019-12528)\n\n* squid: Out of bounds read in Proxy-Authorization header causes DoS (CVE-2019-12529)\n\n* squid: Denial of service in cachemgr.cgi (CVE-2019-12854)\n\n* squid: Buffer overflow in URI processor (CVE-2019-18676)\n\n* squid: Cross-Site Request Forgery issue in HTTP Request processing (CVE-2019-18677)\n\n* squid: HTTP Request Splitting issue in HTTP message processing (CVE-2019-18678)\n\n* squid: Information Disclosure issue in HTTP Digest Authentication (CVE-2019-18679)\n\n* squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour (CVE-2019-18860)\n\n* squid: Improper input validation issues in HTTP Request processing (CVE-2020-8449)\n\n* squid: Buffer overflow in reverse-proxy configurations (CVE-2020-8450)\n\n* squid: DoS in TLS handshake (CVE-2020-14058)\n\n* squid: Request smuggling and poisoning attack against the HTTP cache (CVE-2020-15049)\n\n* squid: Improper input validation could result in a DoS (CVE-2020-24606)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:32:17Z","modified":"2026-02-04T20:00:07.394661Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-18678","description":"An issue was discovered in Squid 3.x and 4.x through 4.8. It allows attackers to smuggle HTTP requests through frontend software to a Squid instance that splits the HTTP Request pipeline differently. The resulting Response messages corrupt caches (between a client and Squid) with attacker-controlled content at arbitrary URLs. Effects are isolated to software between the attacker client and Squid. There are no effects on Squid itself, nor on any upstream servers. The issue is related to a request header containing whitespace between a header name and a colon.","status":"published","published":"2019-11-26T17:15:00Z","modified":"2026-02-04T03:52:10.734355Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"ALSA-2020:4743","title":"Moderate: squid:4 security, bug fix, and enhancement update","description":"Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.\n\nThe following packages have been upgraded to a later upstream version: squid (4.11). (BZ#1829467)\n\nSecurity Fix(es):\n\n* squid: Improper input validation in request allows for proxy manipulation (CVE-2019-12520)\n\n* squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash (CVE-2019-12521)\n\n* squid: Improper input validation in URI processor (CVE-2019-12523)\n\n* squid: Improper access restriction in url_regex may lead to security bypass (CVE-2019-12524)\n\n* squid: Heap overflow issue in URN processing (CVE-2019-12526)\n\n* squid: Information Disclosure issue in FTP Gateway (CVE-2019-12528)\n\n* squid: Out of bounds read in Proxy-Authorization header causes DoS (CVE-2019-12529)\n\n* squid: Denial of service in cachemgr.cgi (CVE-2019-12854)\n\n* squid: Buffer overflow in URI processor (CVE-2019-18676)\n\n* squid: Cross-Site Request Forgery issue in HTTP Request processing (CVE-2019-18677)\n\n* squid: HTTP Request Splitting issue in HTTP message processing (CVE-2019-18678)\n\n* squid: Information Disclosure issue in HTTP Digest Authentication (CVE-2019-18679)\n\n* squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour (CVE-2019-18860)\n\n* squid: Improper input validation issues in HTTP Request processing (CVE-2020-8449)\n\n* squid: Buffer overflow in reverse-proxy configurations (CVE-2020-8450)\n\n* squid: DoS in TLS handshake (CVE-2020-14058)\n\n* squid: Request smuggling and poisoning attack against the HTTP cache (CVE-2020-15049)\n\n* squid: Improper input validation could result in a DoS (CVE-2020-24606)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:32:17Z","modified":"2026-10-29T11:00:17.827616275Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2026-1776878817","title":"squid: Fix of 13 CVEs","description":"- CVE-2018-1000027: fix NULL pointer dereference in\n  clientFollowXForwardedForCheck for transactions without a client connection\n- CVE-2018-19131: fix XSS via X.509 certificate fields rendered unescaped in\n  SSL error pages\n- CVE-2019-12520: prevent cache poisoning by suppressing URL userinfo from\n  absolute URLs for non-FTP schemes\n- CVE-2019-12523: reject URIs with invalid scheme (non-alpha first char) and\n  malformed URN NID\n- CVE-2019-12526: add Must() guard in URN response handling to prevent\n  re-entry with zero-length buffer\n- CVE-2019-12528: fix FTP directory listing parser info leak from heap into\n  HTTP responses\n- CVE-2019-12529: fix Basic auth uudecode out-of-bounds read/write via proper\n  bounds checking\n- CVE-2019-13345: fix multiple XSS issues in cachemgr.cgi via rfc1738-escaping\n  user_name and auth parameters\n- CVE-2019-18676: cap URI scheme length and reject malformed scheme prefixes\n  to prevent buffer overflow in urlParse\n- CVE-2019-18677: prevent CSRF via append_domain truncation by rejecting\n  oversized domain appends\n- CVE-2019-18678: reject HTTP headers with whitespace between field-name and\n  colon per RFC 7230 to prevent request splitting\n- CVE-2019-18679: remove raw heap pointer from Digest nonce hash input to\n  prevent information disclosure and ASLR bypass\n- CVE-2019-18860: fix cachemgr.cgi XSS/info-disclosure via hostname parameter\n  validation","status":"published","published":"2026-10-21T13:51:54Z","modified":"2026-10-26T09:31:38.642283922Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1776879277","title":"squid: Fix of 13 CVEs","description":"- CVE-2018-1000027: fix NULL pointer dereference in\n  clientFollowXForwardedForCheck for transactions without a client connection\n- CVE-2018-19131: fix XSS via X.509 certificate fields rendered unescaped in\n  SSL error pages\n- CVE-2019-12520: prevent cache poisoning by suppressing URL userinfo from\n  absolute URLs for non-FTP schemes\n- CVE-2019-12523: reject URIs with invalid scheme (non-alpha first char) and\n  malformed URN NID\n- CVE-2019-12526: add Must() guard in URN response handling to prevent\n  re-entry with zero-length buffer\n- CVE-2019-12528: fix FTP directory listing parser info leak from heap into\n  HTTP responses\n- CVE-2019-12529: fix Basic auth uudecode out-of-bounds read/write via proper\n  bounds checking\n- CVE-2019-13345: fix multiple XSS issues in cachemgr.cgi via rfc1738-escaping\n  user_name and auth parameters\n- CVE-2019-18676: cap URI scheme length and reject malformed scheme prefixes\n  to prevent buffer overflow in urlParse\n- CVE-2019-18677: prevent CSRF via append_domain truncation by rejecting\n  oversized domain appends\n- CVE-2019-18678: reject HTTP headers with whitespace between field-name and\n  colon per RFC 7230 to prevent request splitting\n- CVE-2019-18679: remove raw heap pointer from Digest nonce hash input to\n  prevent information disclosure and ASLR bypass\n- CVE-2019-18860: fix cachemgr.cgi XSS/info-disclosure via hostname parameter\n  validation","status":"published","published":"2026-04-23T18:38:25Z","modified":"2026-06-01T00:33:26.251745206Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777539404","title":"squid34: Fix of 12 CVEs","description":"- CVE-2019-12525: fix heap buffer over-read in Digest auth parameter parsing\n- CVE-2018-1000027: fix NULL pointer dereference in X-Forwarded-For logging for internal transactions\n- CVE-2018-19131: escape certificate field injection via %D in ERR_SECURE_CONNECT_FAIL page\n- CVE-2018-19132: fix memory leak when parsing denied or malformed SNMP packets\n- CVE-2019-13345: escape user_name and pub_auth parameters in cachemgr.cgi to prevent reflected XSS\n- CVE-2019-18860: validate hostname parameter in cachemgr.cgi to prevent reflected XSS\n- CVE-2019-18677: prevent hostname truncation when append_domain expands origin-relative domains\n- CVE-2019-18679: remove in-memory pointer from Digest nonce hash input (ASLR bypass)\n- CVE-2019-18678: reject HTTP requests with BWS between header field-name and colon (RFC 7230 3.2.4)\n- CVE-2019-12523: validate URN NID per RFC 8141 to prevent SSRF via crafted urn: requests\n- CVE-2019-12528: track FTP listing token positions to avoid strstr-based over-read into adjacent heap\n- CVE-2019-12529: replace uudecode with base64_decode in Basic auth to bound input-buffer reads","status":"published","published":"2026-04-30T08:56:49Z","modified":"2026-10-21T10:48:12.180143482Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777541147","title":"squid34: Fix of 12 CVEs","description":"- CVE-2019-12525: fix heap buffer over-read in Digest auth parameter parsing\n- CVE-2018-1000027: fix NULL pointer dereference in X-Forwarded-For logging for internal transactions\n- CVE-2018-19131: escape certificate field injection via %D in ERR_SECURE_CONNECT_FAIL page\n- CVE-2018-19132: fix memory leak when parsing denied or malformed SNMP packets\n- CVE-2019-13345: escape user_name and pub_auth parameters in cachemgr.cgi to prevent reflected XSS\n- CVE-2019-18860: validate hostname parameter in cachemgr.cgi to prevent reflected XSS\n- CVE-2019-18677: prevent hostname truncation when append_domain expands origin-relative domains\n- CVE-2019-18679: remove in-memory pointer from Digest nonce hash input (ASLR bypass)\n- CVE-2019-18678: reject HTTP requests with BWS between header field-name and colon (RFC 7230 3.2.4)\n- CVE-2019-12523: validate URN NID per RFC 8141 to prevent SSRF via crafted urn: requests\n- CVE-2019-12528: track FTP listing token positions to avoid strstr-based over-read into adjacent heap\n- CVE-2019-12529: replace uudecode with base64_decode in Basic auth to bound input-buffer reads","status":"published","published":"2026-05-02T01:02:36Z","modified":"2026-10-21T10:47:49.998050891Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-2028-1","title":"squid3 - security update","status":"published","published":"2019-12-10T00:00:00Z","modified":"2026-03-09T01:18:28.697382Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2278-1","title":"squid3 - security update","status":"published","published":"2020-07-10T00:00:00Z","modified":"2026-03-09T01:21:50.659924Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4682-1","title":"squid - security update","status":"published","published":"2020-05-08T00:00:00Z","modified":"2026-03-09T02:09:44.67451Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2019-0382","title":"Updated squid packages fix security vulnerabilities","description":"Potential remote code execution during URN processing (CVE-2019-12526).\n\nMultiple improper validations in URI processing (CVE-2019-12523,\nCVE-2019-18676).\n\nCross-Site Request Forgery in HTTP Request processing (CVE-2019-18677).\n\nIncorrect message parsing which could have led to HTTP request splitting\nissue (CVE-2019-18678).\n\nInformation disclosure when processing HTTP Digest Authentication\n(CVE-2019-18679).\n","status":"published","published":"2019-12-13T18:25:24Z","modified":"2026-04-16T04:42:25.598836295Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:2540-1","title":"Security update for squid","description":"This update for squid to version 4.9 fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi (bsc#1140738).\n- CVE-2019-12526: Fixed potential remote code execution during URN processing (bsc#1156326).\n- CVE-2019-12523,CVE-2019-18676: Fixed multiple improper validations in URI processing (bsc#1156329).\n- CVE-2019-18677: Fixed Cross-Site Request Forgery in HTTP Request processing (bsc#1156328).\n- CVE-2019-18678: Fixed incorrect message parsing which could have led to HTTP request splitting issue (bsc#1156323).\n- CVE-2019-18679: Fixed information disclosure when processing HTTP Digest Authentication (bsc#1156324).\n\nOther issues addressed:\n\n * Fixed DNS failures when peer name was configured with any upper case characters\n * Fixed several rock cache_dir corruption issues\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-21T13:25:53Z","modified":"2026-02-04T03:02:00.221686Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2019:2541-1","title":"Security update for squid","description":"This update for squid to version 4.9 fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi (bsc#1140738).\n- CVE-2019-12526: Fixed potential remote code execution during URN processing (bsc#1156326).\n- CVE-2019-12523,CVE-2019-18676: Fixed multiple improper validations in URI processing (bsc#1156329).\n- CVE-2019-18677: Fixed Cross-Site Request Forgery in HTTP Request processing (bsc#1156328).\n- CVE-2019-18678: Fixed incorrect message parsing which could have led to HTTP request splitting issue (bsc#1156323).\n- CVE-2019-18679: Fixed information disclosure when processing HTTP Digest Authentication (bsc#1156324).\n\nOther issues addressed:\n\n * Fixed DNS failures when peer name was configured with any upper case characters\n * Fixed several rock cache_dir corruption issues\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-21T13:26:12Z","modified":"2026-02-04T03:23:00.068716Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11403-1","title":"squid-4.16-1.5 on GA media","description":"These are all security issues fixed in the squid-4.16-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:28:26.444707Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:2975-1","title":"Security update for squid","description":"This update for squid to version 4.9 fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi (bsc#1140738).\n- CVE-2019-12526: Fixed potential remote code execution during URN processing (bsc#1156326).\n- CVE-2019-12523,CVE-2019-18676: Fixed multiple improper validations in URI processing (bsc#1156329).\n- CVE-2019-18677: Fixed Cross-Site Request Forgery in HTTP Request processing (bsc#1156328).\n- CVE-2019-18678: Fixed incorrect message parsing which could have led to HTTP request splitting issue (bsc#1156323).\n- CVE-2019-18679: Fixed information disclosure when processing HTTP Digest Authentication (bsc#1156324).\n\nOther issues addressed:\n\n * Fixed DNS failures when peer name was configured with any upper case characters\n * Fixed several rock cache_dir corruption issues\n","status":"published","published":"2019-11-14T16:02:41Z","modified":"2026-02-04T03:09:27.896801Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3067-1","title":"Security update for squid","description":"This update for squid to version 4.9 fixes the following issues:\n\t  \nSecurity issues fixed: \n\n- CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi (bsc#1140738).\n- CVE-2019-12526: Fixed potential remote code execution during URN processing (bsc#1156326).\n- CVE-2019-12523,CVE-2019-18676: Fixed multiple improper validations in URI processing (bsc#1156329).\n- CVE-2019-18677: Fixed Cross-Site Request Forgery in HTTP Request processing (bsc#1156328).\n- CVE-2019-18678: Fixed incorrect message parsing which could have led to HTTP request splitting issue (bsc#1156323).\n- CVE-2019-18679: Fixed information disclosure when processing HTTP Digest Authentication (bsc#1156324).\n\nOther issues addressesd:\n\n * Fixed DNS failures when peer name was configured with any upper case characters\n * Fixed several rock cache_dir corruption issues\n","status":"published","published":"2019-11-26T09:20:35Z","modified":"2026-02-04T03:17:56.522082Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0661-1","title":"Security update for squid","description":"This update for squid fixes the following issues:\n\n- CVE-2019-12528: Fixed an information disclosure flaw in the FTP gateway (bsc#1162689). \n- CVE-2019-12526: Fixed potential remote code execution during URN processing (bsc#1156326).\n- CVE-2019-12523,CVE-2019-18676: Fixed multiple improper validations in URI processing (bsc#1156329).\n- CVE-2019-18677: Fixed Cross-Site Request Forgery in HTTP Request processing (bsc#1156328).\n- CVE-2019-18678: Fixed incorrect message parsing which could have led to HTTP request splitting issue (bsc#1156323).\n- CVE-2019-18679: Fixed information disclosure when processing HTTP Digest Authentication (bsc#1156324).\n- CVE-2020-8449: Fixed a buffer overflow when squid is acting as reverse-proxy (bsc#1162687).\n- CVE-2020-8450: Fixed a buffer overflow when squid is acting as reverse-proxy (bsc#1162687).\n- CVE-2020-8517: Fixed a buffer overflow in ext_lm_group_acl when processing NTLM Authentication credentials (bsc#1162691).\t  \n","status":"published","published":"2020-03-12T16:01:37Z","modified":"2026-02-04T03:24:31.697905Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:14460-1","title":"Security update for squid3","description":"This update for squid3 fixes the following issues:\n\n- Fixed a Cache Poisoning and Request Smuggling\n  attack (CVE-2020-15049, bsc#1173455)\n- Fixed incorrect buffer handling that can\n  result in cache poisoning, remote execution, and\n  denial of service attacks when processing ESI responses\n  (CVE-2019-12519, CVE-2019-12521, bsc#1169659)\n\n- Fixed handling of hostname in\n  cachemgr.cgi (CVE-2019-18860, bsc#1167373)\n- Fixed a potential remote execution vulnerability\n  when using HTTP Digest Authentication (CVE-2020-11945, bsc#1170313)\n- Fixed a potential ACL bypass, cache-bypass\n  and cross-site scripting attack when processing invalid HTTP\n  Request messages (CVE-2019-12520, CVE-2019-12524, bsc#1170423)\n- Fixed a potential denial of service when\n  processing TLS certificates during HTTPS connections\n  (CVE-2020-14059, bsc#1173304)\n\n- Fixed a potential denial of service associated\n  with incorrect buffer management of HTTP Basic Authentication\n  credentials (bsc#1141329, CVE-2019-12529)\n- Fixed an incorrect buffer management resulting\n  in vulnerability to a denial of service during processing of\n  HTTP Digest Authentication credentials (bsc#1141332, CVE-2019-12525)\n- Fix XSS via user_name or auth parameter\n  in cachemgr.cgi (bsc#1140738, CVE-2019-13345)\n- Fixed a potential code execution vulnerability\n  (CVE-2019-12526, bsc#1156326)\n- Fixed HTTP Request Splitting in HTTP\n  message processing and information disclosure in\n  HTTP Digest Authentication\n  (CVE-2019-18678, CVE-2019-18679, bsc#1156323, bsc#1156324)\n- Fixed a security issue allowing a remote\n  client ability to cause use a buffer overflow when squid is\n  acting as reverse-proxy.\n  (CVE-2020-8449, CVE-2020-8450, bsc#1162687)\n- Fixed a security issue allowing for information\n  disclosure in FTP gateway (CVE-2019-12528, bsc#1162689)\n- Fixed a security issue in ext_lm_group_acl\n  when processing NTLM Authentication credentials.\n  (CVE-2020-8517, bsc#1162691)\n\n- Fixed Cross-Site Request Forgery in\n  HTTP Request processing (CVE-2019-18677, bsc#1156328)\n\n- Disable urn parsing and parsing of\n  unknown schemes (bsc#1156329, CVE-2019-12523, CVE-2019-18676)\n","status":"published","published":"2020-08-24T12:06:51Z","modified":"2025-05-02T04:08:43.365999Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4213-1","title":"squid, squid3 vulnerabilities","description":"Jeriko One and Kristoffer Danielsson discovered that Squid incorrectly\nhandled certain URN requests. A remote attacker could possibly use this\nissue to bypass access checks and access restricted servers. This issue was\nonly addressed in Ubuntu 19.04 and Ubuntu 19.10. (CVE-2019-12523)\n\nJeriko One discovered that Squid incorrectly handed URN responses. A remote\nattacker could use this issue to cause Squid to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2019-12526)\n\nAlex Rousskov discovered that Squid incorrectly handled certain strings. A\nremote attacker could possibly use this issue to cause Squid to crash,\nresulting in a denial of service. This issue only affected Ubuntu 19.04.\n(CVE-2019-12854)\n\nJeriko One and Kristoffer Danielsson discovered that Squid incorrectly\nhandled certain input. A remote attacker could use this issue to cause\nSquid to crash, resulting in a denial of service, or possibly execute\narbitrary code. This issue was only addressed in Ubuntu 19.04 and Ubuntu\n19.10. (CVE-2019-18676)\n\nKristoffer Danielsson discovered that Squid incorrectly handled certain\nmessages. This issue could result in traffic being redirected to origins\nit should not be delivered to. (CVE-2019-18677)\n\nRégis Leroy discovered that Squid incorrectly handled certain HTTP\nrequest headers. A remote attacker could use this to smuggle HTTP requests\nand corrupt caches with arbitrary content. (CVE-2019-18678)\n\nDavid Fifield discovered that Squid incorrectly handled HTTP Digest\nAuthentication. A remote attacker could possibly use this issue to obtain\npointer contents and bypass ASLR protections. (CVE-2019-18679)\n","status":"published","published":"2019-12-04T17:28:48Z","modified":"2026-02-10T04:41:43Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}