CVE Vulnerabilities

CVE-2019-12523

Published: Nov 26, 2019 | Modified: Nov 07, 2023
CVSS 3.x
9.1
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
7.4 MODERATE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Ubuntu
MEDIUM

An issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP request is made. This HTTP request doesnt go through the access checks that incoming HTTP requests go through. This causes all access checks to be bypassed and allows access to restricted HTTP servers, e.g., an attacker can connect to HTTP servers that only listen on localhost.

Affected Software

Name Vendor Start Version End Version
Squid Squid-cache 3.0 (including) 3.5.28 (including)
Squid Squid-cache 4.0 (including) 4.8 (including)
Red Hat Enterprise Linux 8 RedHat squid:4-8030020200828070549.30b713e6 *
Squid Ubuntu devel *
Squid Ubuntu disco *
Squid Ubuntu eoan *
Squid Ubuntu focal *
Squid Ubuntu groovy *
Squid Ubuntu hirsute *
Squid Ubuntu trusty *
Squid Ubuntu upstream *
Squid3 Ubuntu bionic *
Squid3 Ubuntu esm-infra/bionic *
Squid3 Ubuntu esm-infra/xenial *
Squid3 Ubuntu precise/esm *
Squid3 Ubuntu trusty *
Squid3 Ubuntu xenial *

References