Wind River Support Network

HomeDefectsLIN9-9708

Fixed

LIN9-9708 : Security Advisory - squid - CVE-2019-18860

Created: Mar 22, 2020 Updated: Jun 3, 2020

Resolved Date: Jun 3, 2020

Found In Version: 9.0.0.1

Fix Version: 9.0.0.25

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.

CREATE(Triage):(User=admin) [CVE-2019-18860|https://nvd.nist.gov/vuln/detail/CVE-2019-18860]

CVEs

CVE-2019-18860