Information Disclosure Vulnerability in Squid
Summary
CVE-2019-18679: An issue was discovered in Squid 2.x, 3.x, and 4.x through 4.8. Affects squid across 3 version ranges.
< 4.8-r1
< 6cfeb300caf423ff49a0511d8bd43a56f3418273
< fede82b3e7aa1f12a91bade17f6ac0d4c7463e0a
Fixed in 4.8-r1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Squid is an open-source caching proxy server that supports HTTP, HTTPS, FTP, and other protocols. It is widely used to improve web server performance by caching frequently accessed content. The vulnerability, identified as CVE-2019-18679, affects Squid versions 2.x, 3.x, and 4.x through 4.8. It arises due to incorrect data management during the processing of HTTP Digest Authentication. Nonce tokens within the authentication process contain the raw byte value of a pointer from heap memory allocation. Exploiting this vulnerability can lead to information disclosure, reducing ASLR protections and potentially aiding attackers in targeting memory areas for remote code execution attacks.
Vulnerability Detail
The vulnerability in Squid allows for information disclosure when processing HTTP Digest Authentication. By manipulating the nonce tokens, an attacker can obtain the raw byte value of a pointer within heap memory allocation. This information can be used to bypass ASLR protections and identify specific memory areas for potential remote code execution attacks. The vulnerability has a CVSS score of 7.5, indicating a high severity level.
How To Fix
Minimum fixed version
4.8-r1
This is the first release that contains the fix.
sudo apk add --upgrade squidTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability. It is crucial to update Squid to the fixed version as soon as possible.
Conclusion
The information disclosure vulnerability in Squid poses a significant risk to systems utilizing HTTP Digest Authentication. It is crucial to update Squid to the fixed version to mitigate the potential impact of this vulnerability. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for squid →
FAQ
Squid is an open-source caching proxy server that improves web server performance by caching frequently accessed content.
The vulnerability allows for information disclosure and reduces ASLR protections, potentially aiding attackers in targeting memory areas for remote code execution attacks.
Squid versions 2.x, 3.x, and 4.x through 4.8 are affected by this vulnerability.
To fix the vulnerability, update Squid to version 4.8-r1 or later.
No workaround has been provided. Updating Squid to the fixed version is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for squid.
