CVE-2019-12854 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Squid
Severity
7.5HIGHNVD
EPSS
44.5%
top 2.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 15
Latest updateMay 24
Description
Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages3 packages
Also affects: Debian Linux 10.0, Fedora 29, Ubuntu Linux 16.04, 18.04, 19.04, 19.10