CVE-2020-14059: Medium severity squid web proxy cache vulnerability

Q: What is CVE-2020-14059?

CVE-2020-14059 is a vulnerability in Squid 5.x before 5.0.3 that can lead to a Denial of Service due to an Incorrect Synchronization during processing of objects in an SMP cache.

Q: How does CVE-2020-14059 impact Squid?

CVE-2020-14059 can cause a Denial of Service in Squid 5.x before 5.0.3 due to an Incorrect Synchronization issue.

Q: What is the severity of CVE-2020-14059?

The severity of CVE-2020-14059 is medium, with a severity value of 6.5.

Q: Which version of Squid is affected by CVE-2020-14059?

Squid versions before 5.0.3, specifically 5.x, are affected by CVE-2020-14059.

Q: How can I fix CVE-2020-14059?

To fix CVE-2020-14059, it is recommended to upgrade to Squid 5.0.3 or later.

Published Jun 30, 2020

Updated

An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list.

Affected Software

1 affected component

Squid-Cache Squid>=5.0<5.0.3

Remediation

Patch Available

http://www.squid-cache.org/Versions/v5/changesets/squid-5-7a5af8db8e0377c06ed9ffbdcb1334389c7cd8ab.patch

Event History

Jun 30, 2020

CVE Published

via MITRE·06:23 PM

Data Sourced

via MITRE·06:23 PM

Description

Frequently Asked Questions

What is CVE-2020-14059?

CVE-2020-14059 is a vulnerability in Squid 5.x before 5.0.3 that can lead to a Denial of Service due to an Incorrect Synchronization during processing of objects in an SMP cache.

How does CVE-2020-14059 impact Squid?