{"schemaVersion":3,"id":"CVE-2020-15049","aliases":["ALPINE-CVE-2020-15049","SUSE-SU-2020:1946-1","UBUNTU-CVE-2020-15049","DEBIAN-CVE-2020-15049"],"status":"published","duplicateOf":null,"title":null,"description":"An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an HTTP request with a Content-Length header containing \"+\\ \"-\" or an uncommon shell whitespace character prefix to the length field-value.","dates":{"published":"2020-06-30T17:55:55.000Z","modified":"2024-08-04T13:08:21.396Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.9,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.9,"severity":"critical","vector":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":9.9,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":7.9,"impact":10,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.5,"severity":"medium","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.05706,"percentile":0.92937,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.05706},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05706,"percentile":0.92937}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05706,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05706,"percentile":0.92937}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-444","name":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')","description":"The product acts as an intermediary HTTP agent\n         (such as a proxy or firewall) in the data flow between two\n         entities such as a client and server, but it does not\n         interpret malformed HTTP requests or responses in ways that\n         are consistent with how the messages will be processed by\n         those entities that are at the ultimate destination.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/444.html"}],"affected":[{"vendor":"alpine","product":"squid","name":"squid","label":"squid","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/squid","purlType":"apk","versions":[{"text":"≥ 2.0, < 4.12.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.0, < 4.12.0-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"squid","name":"squid","label":"squid","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/squid","purlType":"deb","versions":[{"text":"< 4.12-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.12-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"squid","name":"squid","label":"squid","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/squid","purlType":"deb","versions":[{"text":"< 4.10-1ubuntu1.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.10-1ubuntu1.3","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"squid3","name":"squid3","label":"squid3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/squid3","purlType":"deb","versions":[{"text":"< 3.5.12-1ubuntu7.15","noFixRecorded":false,"fixedIn":null},{"text":"< 3.5.27-1ubuntu1.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.12-1ubuntu7.15 | < 3.5.27-1ubuntu1.9","eol":null,"hubHref":null},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"31","noFixRecorded":false,"fixedIn":null}],"versionsText":"31","eol":{"isEol":true,"eolDate":"2020-11-24T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"31","label":"31","eolFrom":"2020-11-24T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"suse","product":"squid&distro=HPE Helion OpenStack 8","name":"squid","label":"squid&distro=HPE Helion OpenStack 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=HPE Helion OpenStack 8","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE Enterprise Storage 5","name":"squid","label":"squid&distro=SUSE Enterprise Storage 5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE Enterprise Storage 5","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE Linux Enterprise Server 12 SP2-BCL","name":"squid","label":"squid&distro=SUSE Linux Enterprise Server 12 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE Linux Enterprise Server 12 SP2-BCL","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","name":"squid","label":"squid&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE Linux Enterprise Server 12 SP3-BCL","name":"squid","label":"squid&distro=SUSE Linux Enterprise Server 12 SP3-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE Linux Enterprise Server 12 SP3-BCL","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","name":"squid","label":"squid&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","name":"squid","label":"squid&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"squid","label":"squid&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"squid","label":"squid&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"squid","label":"squid&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE OpenStack Cloud 7","name":"squid","label":"squid&distro=SUSE OpenStack Cloud 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE OpenStack Cloud 7","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE OpenStack Cloud 8","name":"squid","label":"squid&distro=SUSE OpenStack Cloud 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE OpenStack Cloud 8","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE OpenStack Cloud 9","name":"squid","label":"squid&distro=SUSE OpenStack Cloud 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE OpenStack Cloud 9","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE OpenStack Cloud Crowbar 8","name":"squid","label":"squid&distro=SUSE OpenStack Cloud Crowbar 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE OpenStack Cloud Crowbar 8","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"squid&distro=SUSE OpenStack Cloud Crowbar 9","name":"squid","label":"squid&distro=SUSE OpenStack Cloud Crowbar 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/squid&distro=SUSE OpenStack Cloud Crowbar 9","purlType":"rpm","versions":[{"text":"< 3.5.21-26.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.21-26.29.1","eol":null,"hubHref":null},{"vendor":"squid-cache","product":"squid","name":"squid","label":"squid","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.0, ≤ 2.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 3.1, ≤ 3.5.28","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.0, < 4.12","noFixRecorded":false,"fixedIn":null},{"text":"≥ 5.0, < 5.0.3","noFixRecorded":false,"fixedIn":null},{"text":"2.7","noFixRecorded":false,"fixedIn":null},{"text":"2.7:stable2","noFixRecorded":false,"fixedIn":null},{"text":"2.7:stable3","noFixRecorded":false,"fixedIn":null},{"text":"2.7:stable4","noFixRecorded":false,"fixedIn":null},{"text":"2.7:stable5","noFixRecorded":false,"fixedIn":null},{"text":"2.7:stable6","noFixRecorded":false,"fixedIn":null},{"text":"2.7:stable7","noFixRecorded":false,"fixedIn":null},{"text":"2.7:stable8","noFixRecorded":false,"fixedIn":null},{"text":"2.7:stable9","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.0, ≤ 2.6 | ≥ 3.1, ≤ 3.5.28 | ≥ 4.0, < 4.12 | ≥ 5.0, < 5.0.3 | 2.7 | 2.7:stable2 | 2.7:stable3 | 2.7:stable4 | 2.7:stable5 | 2.7:stable6 | 2.7:stable7 | 2.7:stable8 | 2.7:stable9","eol":{"isEol":true,"eolDate":"2010-03-14T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"2.7","label":"2.7","eolFrom":"2010-03-14T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"2.7.9"},"product":{"name":"squid","label":"Squid","category":"server-app"}},"hubHref":"/vendor/squid-cache/squid"}],"affectedCount":21,"eol":{"hasEol":true,"count":2},"references":[{"url":"http://www.squid-cache.org/Versions/v4/changesets/squid-4-ea12a34d338b962707d5078d6d1fc7c6eb119a22.patch","label":"www.squid-cache.org/Versions/v4/changesets/squid-4-ea12a34d338b962707d5078d6d1fc7c6eb119a22.patch","hostname":"www.squid-cache.org","tags":["X Refsource MISC","Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Versions/v5/changesets/squid-5-485c9a7bb1bba88754e07ad0094647ea57a6eb8d.patch","label":"www.squid-cache.org/Versions/v5/changesets/squid-5-485c9a7bb1bba88754e07ad0094647ea57a6eb8d.patch","hostname":"www.squid-cache.org","tags":["X Refsource MISC","Patch","Vendor Advisory"]},{"url":"https://github.com/squid-cache/squid/security/advisories/GHSA-qf3v-rc95-96j5","label":"github.com/squid-cache/squid/security/advisories/GHSA-qf3v-rc95-96j5","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3RG5FGSTCAYVIJPJHIY3MRZ7NFT6HDO7/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://www.debian.org/security/2020/dsa-4732","label":"www.debian.org/security/2020/dsa-4732","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00012.html","label":"lists.opensuse.org/opensuse-security-announce/2020-09/msg00012.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00017.html","label":"lists.opensuse.org/opensuse-security-announce/2020-09/msg00017.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"https://usn.ubuntu.com/4551-1/","label":"usn.ubuntu.com/4551-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/10/msg00005.html","label":"lists.debian.org/debian-lts-announce/2020/10/msg00005.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://security.netapp.com/advisory/ntap-20210312-0001/","label":"security.netapp.com/advisory/ntap-20210312-0001/","hostname":"security.netapp.com","tags":["X Refsource CONFIRM"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-15049","label":"security.alpinelinux.org/vuln/CVE-2020-15049","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201946-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-20201946-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1173455","label":"bugzilla.suse.com/1173455","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15049","label":"www.suse.com/security/cve/CVE-2020-15049","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2020-15049","label":"ubuntu.com/security/CVE-2020-15049","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-4551-1","label":"ubuntu.com/security/notices/USN-4551-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4895-1","label":"ubuntu.com/security/notices/USN-4895-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15049","label":"www.cve.org/CVERecord?id=CVE-2020-15049","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-15049","label":"security-tracker.debian.org/tracker/CVE-2020-15049","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-2394-1","DSA-4732-1","OPENSUSE-SU-2020:1346-1","OPENSUSE-SU-2020:1369-1","OPENSUSE-SU-2024:11403-1","RHSA-2020:4082","RHSA-2020:4743","SUSE-SU-2020:14460-1","SUSE-SU-2020:2442-1","SUSE-SU-2020:2443-1","USN-4551-1","USN-4895-1"],"duplicates":[],"related":["OPENSUSE-SU-2020:1346-1","OPENSUSE-SU-2020:1369-1","OPENSUSE-SU-2024:11403-1","SUSE-SU-2020:14460-1","SUSE-SU-2020:2442-1","SUSE-SU-2020:2443-1","USN-4551-1","USN-4895-1"]},"timeline":[{"kind":"published","date":"2020-06-30T17:55:55.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T13:08:21.396Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:48:55.277Z","stale":false,"partial":false}}