Wind River Support Network

HomeDefectsLIN9-9976
Fixed

LIN9-9976 : Security Advisory - squid - CVE-2018-1000027

Created: May 31, 2020    Updated: Jun 11, 2020
Resolved Date: Jun 3, 2020
Previous ID: LIN8-12494
Found In Version: 9.0.0.24
Fix Version: 9.0.0.25
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header processing that can result in Denial of Service to all clients of the proxy. This attack appear to be exploitable via Remote HTTP server responding with an X-Forwarded-For header to certain types of HTTP request. This vulnerability appears to have been fixed in 4.0.23 and later.

CREATE(Triage):(User=admin) [CVE-2018-1000027|https://nvd.nist.gov/vuln/detail/CVE-2018-1000027]

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube