kritisch
CVE-2019-12525
squid: parsing of header Proxy-Authentication leads to memory corruption
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat4.3CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut AlmaLinux (hoch), Amazon (hoch), Oracle (hoch), Rocky Linux (hoch), Red Hat (mittel), Ubuntu (mittel).
Beschreibung
An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authentication, it parses the header Proxy-Authorization. It searches for certain tokens such as domain, uri, and qop. Squid checks if this token's value starts with a quote and ends with one. If so, it performs a memcpy of its length minus 2. Squid never checks whether the value is just a single quote (which would satisfy its requirements), leading to a memcpy of its length minus 1.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| alma 8 | squid:4::libecap, squid:4::libecap-devel | 1.0.1-2.module_el8.6.0+2741+01592ae8 |
| alpine 3.10 | squid | 4.8-r0 |
| alpine 3.9 | squid | 4.8-r0 |
| amazon linux 1 | squid, squid-debuginfo, squid-migration-script | 7:3.5.20-15.39.amzn1 |
| amazon linux 2 | squid, squid-debuginfo, squid-migration-script und 1 weitere | 7:3.5.20-15.amzn2.1 |
| debian 10 | squid | 4.6-1+deb10u1 |
| debian 11 | squid | 4.8-1 |
| debian 12 | squid | 4.8-1 |
| debian 13 | squid | 4.8-1 |
| debian 14 | squid | 4.8-1 |
| debian 8 | squid3 | 3.4.8-6+deb8u8 |
| debian 9 | squid3 | 3.5.23-5+deb9u2 |
Alle 33 Einträge aus 22 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| alma 8 | squid:4::libecap | 1.0.1-2.module_el8.6.0+2741+01592ae8 |
| alma 8 | squid:4::libecap-devel | 1.0.1-2.module_el8.6.0+2741+01592ae8 |
| alpine 3.10 | squid | 4.8-r0 |
| alpine 3.9 | squid | 4.8-r0 |
| amazon linux 1 | squid | 7:3.5.20-15.39.amzn1 |
| amazon linux 1 | squid-debuginfo | 7:3.5.20-15.39.amzn1 |
| amazon linux 1 | squid-migration-script | 7:3.5.20-15.39.amzn1 |
| amazon linux 2 | squid | 7:3.5.20-15.amzn2.1 |
| amazon linux 2 | squid-debuginfo | 7:3.5.20-15.amzn2.1 |
| amazon linux 2 | squid-migration-script | 7:3.5.20-15.amzn2.1 |
| amazon linux 2 | squid-sysvinit | 7:3.5.20-15.amzn2.1 |
| debian 10 | squid | 4.6-1+deb10u1 |
| debian 11 | squid | 4.8-1 |
| debian 12 | squid | 4.8-1 |
| debian 13 | squid | 4.8-1 |
| debian 14 | squid | 4.8-1 |
| debian 8 | squid3 | 3.4.8-6+deb8u8 |
| debian 9 | squid3 | 3.5.23-5+deb9u2 |
| echo | squid | 4.8-1 |
| Oracle Linux 7 | squid | 7:3.5.20-15.el7_8.1 |
| Oracle Linux 7 | squid-migration-script | 7:3.5.20-15.el7_8.1 |
| Oracle Linux 7 | squid-sysvinit | 7:3.5.20-15.el7_8.1 |
| Oracle Linux 8 | libecap | 1.0.1-2.module+el8.1.0+5405+03b963f4 |
| Oracle Linux 8 | libecap-devel | 1.0.1-2.module+el8.1.0+5405+03b963f4 |
| Oracle Linux 8 | squid | 7:4.4-8.module+el8.2.0+7611+d512f060.1 |
| Red Hat | squid34 | kein Fix angegeben |
| rocky 8 | squid:4::libecap | 1.0.1-2.module+el8.4.0+404+316a0dc5 |
| rocky 8 | squid:4::libecap-devel | 1.0.1-2.module+el8.4.0+404+316a0dc5 |
| ubuntu 16.04 | squid3 | 3.5.12-1ubuntu7.8 |
| ubuntu 16.04-ESM | squid3 | 3.5.12-1ubuntu7.8 |
| ubuntu 18.04 | squid3 | 3.5.27-1ubuntu1.3 |
| ubuntu 18.04-ESM | squid3 | 3.5.27-1ubuntu1.3 |
| ubuntu 19.04 | squid | 4.4-1ubuntu2.2 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html
- http://www.squid-cache.org/Advisories/SQUID-2019_3.txt
- http://www.squid-cache.org/Versions/v4/changesets/
- http://www.squid-cache.org/Versions/v4/changesets/squid-4-7f73e9c5d17664b882ed32590e6af310c247f320.patch
- https://access.redhat.com/security/cve/CVE-2019-12525
- https://bugzilla.redhat.com/show_bug.cgi?id=1730535
- https://bugzilla.redhat.com/show_bug.cgi?id=1827552
Alle 28 Referenzen
- https://bugzilla.redhat.com/show_bug.cgi?id=1827563
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12519
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12525
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11945
- https://errata.almalinux.org/8/ALSA-2020-2041.html
- https://errata.rockylinux.org/RLSA-2020:2041
- https://github.com/squid-cache/squid/commits/v4
- https://linux.oracle.com/cve/CVE-2019-12525.html
- https://linux.oracle.com/errata/ELSA-2020-2041.html
- https://lists.debian.org/debian-lts-announce/2019/07/msg00018.html
- https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPXN2CLAGN5QSQBTOV5IGVLDOQSRFNTZ/
- https://nvd.nist.gov/vuln/detail/CVE-2019-12525
- https://seclists.org/bugtraq/2019/Aug/42
- https://ubuntu.com/security/notices/USN-4065-1
- https://ubuntu.com/security/notices/USN-4065-2
- https://usn.ubuntu.com/4065-1/
- https://usn.ubuntu.com/4065-2/
- https://www.cve.org/CVERecord?id=CVE-2019-12525
- https://www.debian.org/security/2019/dsa-4507