Description

An issue was discovered in Squid before 4.9. URN response handling in Squid suffers from a heap-based buffer overflow. When receiving data from a remote server in response to an URN request, Squid fails to ensure that the response can fit within the buffer. This leads to attacker controlled data overflowing in the heap.

Remediation

References

CVE-2019-12526

Related Vulnerabilities

ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5833)

WordPress Plugin AddToAny Share Buttons Cross-Site Scripting (1.7.47)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-39151)

WordPress Plugin WP-Predict 'predictId' Parameter Blind SQL Injection (1.0)

WordPress Plugin Thrive Optimize Security Bypass (1.4.13.2)

Severity

Critical

Classification

CVE-2019-12526 CWE-120 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities