CVE-2021-28116: Medium severity Squid-Cache Squid vulnerability
In some configurations, squid allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.
Other sources
Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/squidto a version that resolves this vulnerability.Fixed in 4.6-1+deb10u7Fixed in 4.6-1+deb10u8Fixed in 4.13-10+deb11u2Fixed in 5.7-2Fixed in 6.3-1
Event History
Frequently Asked Questions
What is CVE-2021-28116?
CVE-2021-28116 is a vulnerability in Squid versions 4.14 and 5.x through 5.0.5 that allows information disclosure through an out-of-bounds read in the WCCP protocol data.
How severe is CVE-2021-28116?
CVE-2021-28116 has a severity rating of 5.3, which is considered medium.
How can CVE-2021-28116 be exploited?
CVE-2021-28116 can be leveraged as part of a chain for remote code execution.
What software is affected by CVE-2021-28116?
Squid versions 4.6-1+deb10u7, 4.6-1+deb10u8, 4.13-10+deb11u2, 5.7-2, and 6.3-1 are affected, as well as Squid-Cache Squid versions up to 4.14 and versions up to 5.0.5.
How do I mitigate CVE-2021-28116?
To mitigate CVE-2021-28116, it is recommended to upgrade to a fixed version of Squid or follow the recommended remedies provided by the vendor.