REDHAT-BUG-1939939: Medium severity Squid Squid vulnerability

Published Mar 17, 2021

Updated

In some configurations, squid allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.

Affected Software

1 affected component

Squid Squid

Event History

Mar 17, 2021

Data Sourced

via Red Hat·10:28 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments are exposed to this issue?

The issue affects Squid only in some configurations involving WCCP protocol data. The provided information does not identify the specific configuration settings or whether WCCP is enabled by default.

What could an attacker gain from exploiting the flaw?

The direct impact is information disclosure caused by an out-of-bounds read. The issue may also be used as part of a chain leading to remote code execution with the privileges of the nobody user.

Does exploitation require local access or authentication?

The issue is described as usable in a chain for remote code execution, but the provided information does not state whether authentication, local access, or network access to a WCCP-enabled service is required.

REDHAT-BUG-1939939: Medium severity Squid Squid vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What could an attacker gain from exploiting the flaw?

Does exploitation require local access or authentication?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What could an attacker gain from exploiting the flaw?

Does exploitation require local access or authentication?