SUSE-SU-2019:3067-1: squid&distro=SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2019:3067-1 is a vulnerability in squid&distro=SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 7 · Downstream 0 · Related 7Timeline
- 26-11-2019PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for squid This update for squid to version 4.9 fixes the following issues: Security issues fixed: - CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi (bsc#1140738). - CVE-2019-12526: Fixed potential remote code execution during URN processing (bsc#1156326). - CVE-2019-12523,CVE-2019-18676: Fixed multiple improper validations in URI processing (bsc#1156329). - CVE-2019-18677: Fixed Cross-Site Request Forgery in HTTP Request processing (bsc#1156328). - CVE-2019-18678: Fixed incorrect message parsing which could have led to HTTP request splitting issue (bsc#1156323). - CVE-2019-18679: Fixed information disclosure when processing HTTP Digest Authentication (bsc#1156324). Other issues addressesd: * Fixed DNS failures when peer name was configured with any upper case characters * Fixed several rock cache_dir corruption issues
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- squid&distro=SUSE Linux Enterprise Server 12 SP5< 4.9-4.3.2
- squid&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 4.9-4.3.2
1 vendor · 2 products