SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-12522

This makes it trivial for an attacker who has compromised the child process to escalate their privileges back to root.

MEDIUM 4.5EPSS 0.34%

Does this matter?

Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.

Description

An issue was discovered in Squid through 4.7. When Squid is run as root, it spawns its child processes as a lesser user, by default the user nobody. This is done via the leave_suid call. leave_suid leaves the Saved UID as 0. This makes it trivial for an attacker who has compromised the child process to escalate their privileges back to root.

CVSS 3.1
4.5 MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS
0.34% probability · 28th percentile
CISA KEV
Not listed
Weakness
CWE-269
Affected
squid-cache/squid
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.