crítica
CVE-2019-12525
squid: parsing of header Proxy-Authentication leads to memory corruption
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat4.3CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según AlmaLinux (alta), Amazon (alta), Oracle (alta), Rocky Linux (alta), Red Hat (media), Ubuntu (media).
Descripción
An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authentication, it parses the header Proxy-Authorization. It searches for certain tokens such as domain, uri, and qop. Squid checks if this token's value starts with a quote and ends with one. If so, it performs a memcpy of its length minus 2. Squid never checks whether the value is just a single quote (which would satisfy its requirements), leading to a memcpy of its length minus 1.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | squid:4::libecap, squid:4::libecap-devel | 1.0.1-2.module_el8.6.0+2741+01592ae8 |
| alpine 3.10 | squid | 4.8-r0 |
| alpine 3.9 | squid | 4.8-r0 |
| amazon linux 1 | squid, squid-debuginfo, squid-migration-script | 7:3.5.20-15.39.amzn1 |
| amazon linux 2 | squid, squid-debuginfo, squid-migration-script y 1 más | 7:3.5.20-15.amzn2.1 |
| debian 10 | squid | 4.6-1+deb10u1 |
| debian 11 | squid | 4.8-1 |
| debian 12 | squid | 4.8-1 |
| debian 13 | squid | 4.8-1 |
| debian 14 | squid | 4.8-1 |
| debian 8 | squid3 | 3.4.8-6+deb8u8 |
| debian 9 | squid3 | 3.5.23-5+deb9u2 |
Mostrar las 33 entradas de 22 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alma 8 | squid:4::libecap | 1.0.1-2.module_el8.6.0+2741+01592ae8 |
| alma 8 | squid:4::libecap-devel | 1.0.1-2.module_el8.6.0+2741+01592ae8 |
| alpine 3.10 | squid | 4.8-r0 |
| alpine 3.9 | squid | 4.8-r0 |
| amazon linux 1 | squid | 7:3.5.20-15.39.amzn1 |
| amazon linux 1 | squid-debuginfo | 7:3.5.20-15.39.amzn1 |
| amazon linux 1 | squid-migration-script | 7:3.5.20-15.39.amzn1 |
| amazon linux 2 | squid | 7:3.5.20-15.amzn2.1 |
| amazon linux 2 | squid-debuginfo | 7:3.5.20-15.amzn2.1 |
| amazon linux 2 | squid-migration-script | 7:3.5.20-15.amzn2.1 |
| amazon linux 2 | squid-sysvinit | 7:3.5.20-15.amzn2.1 |
| debian 10 | squid | 4.6-1+deb10u1 |
| debian 11 | squid | 4.8-1 |
| debian 12 | squid | 4.8-1 |
| debian 13 | squid | 4.8-1 |
| debian 14 | squid | 4.8-1 |
| debian 8 | squid3 | 3.4.8-6+deb8u8 |
| debian 9 | squid3 | 3.5.23-5+deb9u2 |
| echo | squid | 4.8-1 |
| Oracle Linux 7 | squid | 7:3.5.20-15.el7_8.1 |
| Oracle Linux 7 | squid-migration-script | 7:3.5.20-15.el7_8.1 |
| Oracle Linux 7 | squid-sysvinit | 7:3.5.20-15.el7_8.1 |
| Oracle Linux 8 | libecap | 1.0.1-2.module+el8.1.0+5405+03b963f4 |
| Oracle Linux 8 | libecap-devel | 1.0.1-2.module+el8.1.0+5405+03b963f4 |
| Oracle Linux 8 | squid | 7:4.4-8.module+el8.2.0+7611+d512f060.1 |
| Red Hat | squid34 | sin corrección indicada |
| rocky 8 | squid:4::libecap | 1.0.1-2.module+el8.4.0+404+316a0dc5 |
| rocky 8 | squid:4::libecap-devel | 1.0.1-2.module+el8.4.0+404+316a0dc5 |
| ubuntu 16.04 | squid3 | 3.5.12-1ubuntu7.8 |
| ubuntu 16.04-ESM | squid3 | 3.5.12-1ubuntu7.8 |
| ubuntu 18.04 | squid3 | 3.5.27-1ubuntu1.3 |
| ubuntu 18.04-ESM | squid3 | 3.5.27-1ubuntu1.3 |
| ubuntu 19.04 | squid | 4.4-1ubuntu2.2 |
Referencias
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html
- http://www.squid-cache.org/Advisories/SQUID-2019_3.txt
- http://www.squid-cache.org/Versions/v4/changesets/
- http://www.squid-cache.org/Versions/v4/changesets/squid-4-7f73e9c5d17664b882ed32590e6af310c247f320.patch
- https://access.redhat.com/security/cve/CVE-2019-12525
- https://bugzilla.redhat.com/show_bug.cgi?id=1730535
- https://bugzilla.redhat.com/show_bug.cgi?id=1827552
Las 28 referencias
- https://bugzilla.redhat.com/show_bug.cgi?id=1827563
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12519
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12525
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11945
- https://errata.almalinux.org/8/ALSA-2020-2041.html
- https://errata.rockylinux.org/RLSA-2020:2041
- https://github.com/squid-cache/squid/commits/v4
- https://linux.oracle.com/cve/CVE-2019-12525.html
- https://linux.oracle.com/errata/ELSA-2020-2041.html
- https://lists.debian.org/debian-lts-announce/2019/07/msg00018.html
- https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPXN2CLAGN5QSQBTOV5IGVLDOQSRFNTZ/
- https://nvd.nist.gov/vuln/detail/CVE-2019-12525
- https://seclists.org/bugtraq/2019/Aug/42
- https://ubuntu.com/security/notices/USN-4065-1
- https://ubuntu.com/security/notices/USN-4065-2
- https://usn.ubuntu.com/4065-1/
- https://usn.ubuntu.com/4065-2/
- https://www.cve.org/CVERecord?id=CVE-2019-12525
- https://www.debian.org/security/2019/dsa-4507