{"schemaVersion":3,"id":"USN-4065-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"squid, squid3 vulnerabilities\n\nIt was discovered that Squid incorrectly handled Digest authentication. A\nremote attacker could possibly use this issue to cause Squid to crash,\nresulting in a denial of service. (CVE-2019-12525)\n\nIt was discovered that Squid incorrectly handled Basic authentication. A\nremote attacker could use this issue to cause Squid to crash, resulting in\na denial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 19.04. (CVE-2019-12527)\n\nIt was discovered that Squid incorrectly handled Basic authentication. A\nremote attacker could possibly use this issue to cause Squid to crash,\nresulting in a denial of service. (CVE-2019-12529)","dates":{"published":"2019-07-18T17:22:23.000Z","modified":"2026-02-10T04:41:34.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"squid3","name":"squid3","label":"squid3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/squid3","purlType":"deb","versions":[{"text":"< 3.5.12-1ubuntu7.8","noFixRecorded":false,"fixedIn":null},{"text":"< 3.5.27-1ubuntu1.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.12-1ubuntu7.8 | < 3.5.27-1ubuntu1.3","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-4065-1","label":"ubuntu.com/security/notices/USN-4065-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-12525","label":"ubuntu.com/security/CVE-2019-12525","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-12527","label":"ubuntu.com/security/CVE-2019-12527","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-12529","label":"ubuntu.com/security/CVE-2019-12529","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2019-12525","CVE-2019-12529"],"downstream":[],"duplicates":[],"related":["CVE-2019-12525","CVE-2019-12529"]},"timeline":[{"kind":"published","date":"2019-07-18T17:22:23.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-10T04:41:34.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T16:57:34.683Z","stale":false,"partial":false}}