SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-12525

An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7.

CRITICAL 9.8EPSS 24.4%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 24.4%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authentication, it parses the header Proxy-Authorization. It searches for certain tokens such as domain, uri, and qop. Squid checks if this token's value starts with a quote and ends with one. If so, it performs a memcpy of its length minus 2. Squid never checks whether the value is just a single quote (which would satisfy its requirements), leading to a memcpy of its length minus 1.

CVSS 3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
24.40% probability · 98th percentile
CISA KEV
Not listed
Weakness
CWE-787
Affected
squid-cache/squid · debian/debian linux · opensuse/leap · fedoraproject/fedora · canonical/ubuntu linux
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.